CVE-2021-40859

CRITICAL 9.8CVE-2021-40859 · Published 07/12/2021 · updated 17/06/2026

In short

CVE-2021-40859 is a CRITICAL (CVSS 9.8) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 72.0%, higher than 99.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device.

References

redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses · Third Party Advisory
redteam-pentesting.de/en/advisories/rt-sa-2021-007/-auerswald-compact-multiple-backdoors · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free