CVE-2021-40858
Published Dec 13, 2021Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure. A sub-admin can read the cleartext Admin password via the fileName=../../etc/passwd substring.
Vendor archive
auerswald CVEs
Beta · best-effort7 CVEs tagged to vendor auerswald — 1 Critical, 4 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2021-40857
Published Dec 13, 2021Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via the passwd=1 substring.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2021-40856
Published Dec 13, 2021Auerswald COMfortel 1400 IP and 2600 IP before 2.8G devices allow Authentication Bypass via the /about/../ substring.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2021-40859
Published Dec 7, 2021Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2018-19978
Published May 29, 2019A buffer overflow vulnerability in the DHCP and PPPOE configuration interface of the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows a remote attacker (authenticated as simpl…
CVE-2018-19977
Published May 29, 2019A command injection (missing input validation, escaping) in the ftp upgrade configuration interface on the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows an authenticated re…
CVE-2003-1457
Published Dec 31, 2003Auerswald COMsuite CTI ControlCenter 3.1 creates a default "runasositron" user account with an easily guessable password, which allows local users or remote attackers to gain acce…
Showing 1-7 of 7 CVEsPage 1 of 1