CVEs-PoC/2021/CVE-2021-40858.md

CVE-2021-40858

Description

Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure. A sub-admin can read the cleartext Admin password via the fileName=../../etc/passwd substring.

POC

Reference

• http://packetstormsecurity.com/files/165166/Auerswald-COMpact-8.0B-Arbitrary-File-Disclosure.html
• https://www.redteam-pentesting.de/advisories/rt-sa-2021-006
• https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses

Github

• https://github.com/ARPSyndicate/cvemon