← Database

CVE-2021-40858

MEDIUM CVSS: 4.9 Published: 2021-12-13 Modified: 2026-06-17

Description

Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure. A sub-admin can read the cleartext Admin password via the fileName=../../etc/passwd substring.

Affected Platforms

Auerswald Compact 4000 Ip FirmwareAuerswald Commander Basic.2\(19\"\) IpAuerswald Commander 6000R Ip FirmwareAuerswald Commander 6000R IpAuerswald Compact 5010 Voip IpAuerswald Compact 5000R IpAuerswald Commander Business\(19\"\) Ip FirmwareAuerswald Compact 5020 Voip IpAuerswald Commander Business\(19\"\) IpAuerswald Compact 5020 Voip Ip Firmware

Weakness Type

CWE-22

References