2021-12-29 15:58:30 +00:00
id : CVE-2021-40859
info :
2022-03-17 17:01:45 +00:00
name : Auerswald COMpact 5500R 7.8A and 8.0B Devices Backdoor
2021-12-29 15:58:30 +00:00
author : pussycat0x
severity : critical
2022-05-17 09:18:12 +00:00
description : Auerswald COMpact 5500R 7.8A and 8.0B devices contain an unauthenticated endpoint ("https://192.168.1[.]2/about_state"), enabling the bad actor to gain backdoor access to a web interface that allows for resetting the administrator password.
2023-09-06 12:09:01 +00:00
remediation : |
Apply the latest firmware update provided by Auerswald to fix the backdoor vulnerability.
2021-12-29 15:58:30 +00:00
reference :
- https://thehackernews.com/2021/12/secret-backdoors-found-in-german-made.html
2021-12-30 06:45:02 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2021-40859
2022-05-17 09:18:12 +00:00
- https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses
- https://www.redteam-pentesting.de/en/advisories/rt-sa-2021-007/-auerswald-compact-multiple-backdoors
2021-12-22 06:47:35 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2022-04-22 10:38:41 +00:00
cvss-score : 9.8
2021-12-22 06:47:35 +00:00
cve-id : CVE-2021-40859
2023-07-15 16:29:17 +00:00
epss-score : 0.02655
2023-10-25 17:36:19 +00:00
epss-percentile : 0.89204
2023-09-06 12:09:01 +00:00
cpe : cpe:2.3:o:auerswald:compact_5500r_firmware:7.8a:build002:*:*:*:*:*:*
2022-04-22 10:38:41 +00:00
metadata :
2023-04-28 08:11:21 +00:00
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : auerswald
product : compact_5500r_firmware
2023-09-06 12:09:01 +00:00
fofa-query : '"auerswald"'
2021-12-30 06:45:02 +00:00
tags : cve,cve2021,iot,unauth,voip,auerswald
2021-12-29 15:58:30 +00:00
2023-04-27 04:28:59 +00:00
http :
2021-12-29 15:58:30 +00:00
- method : GET
path :
- "{{BaseURL}}/about_state"
matchers-condition : and
matchers :
- type : word
2021-12-30 06:45:22 +00:00
part : body
2021-12-29 15:58:30 +00:00
words :
- '"pbx"'
- '"dongleStatus":0'
- '"macaddr"'
condition : and
- type : word
part : header
words :
- "application/json"
- type : status
status :
2021-12-30 06:45:02 +00:00
- 200
2023-10-26 12:01:43 +00:00
# digest: 490a0046304402205ddab21aa23aa3b2dae4e801d197522b589a35b319786d24685b33ccba76fabd02207f52fe6205544b3320097e2fe1ee5789a1c9c37fa6dd179e992b4781da722601:922c64590222798bb761d5b6d8e72950