CVE-2021-40858 - CERT CVE
ID CVE-2021-40858
Sažetak Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure. A sub-admin can read the cleartext Admin password via the fileName=../../etc/passwd substring.
Reference
CVSS
Base: 6.8
Impact: 6.9
Exploitability:8.0
Pristup
VektorSloženostAutentikacija
NETWORK LOW SINGLE
Impact
PovjerljivostCjelovitostDostupnost
COMPLETE NONE NONE
CVSS vektor AV:N/AC:L/Au:S/C:C/I:N/A:N
Zadnje važnije ažuriranje 04-01-2022 - 16:08
Objavljeno 13-12-2021 - 04:15