CVE-2021-40857
high-risk
Published 2021-12-13
Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via the passwd=1 substring.
Do I need to act?
~
1.4% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10
High
NETWORK
/ LOW complexity
Affected Products (10)
Compact 5500R Ip Firmware
Compact 5200R Ip Firmware
Compact 5000R Ip Firmware
Compact 4000 Ip Firmware
Commander 6000R Ip Firmware
Commander 6000Rx Ip Firmware
Commander Business\(19\"\) Ip Firmware
Commander Basic.2\(19\"\) Ip Firmware
Compact 5010 Voip Ip Firmware
Compact 5020 Voip Ip Firmware
Affected Vendors
References (6)
50
/ 100
high-risk
Severity
30/34 · Critical
Exploitability
4/34 · Minimal
Exposure
16/34 · Moderate