CVE-2021-40859 Scanner

The Auerswald COMpact 5500R is a communication device used in businesses and offices as a private branch exchange (PBX) system. It allows for the centralization of communication processes, including phone calls, voicemail, and messaging. The device is commonly used as a cost-effective solution for small to medium-sized enterprises.

Recently, a critical vulnerability (CVE-2021-40859) was discovered in the Auerswald COMpact 5500R device versions 7.8A and 8.0B. The vulnerability allows attackers with web-based management access to gain full administrative control over the device. Attackers can exploit this vulnerability remotely, potentially causing significant damage to businesses and their communication processes.

When exploited, this vulnerability can lead to unauthorized access, which may result in attackers intercepting or tampering with sensitive communication data. This could include confidential messages and phone calls, result in data loss, and negatively impact business continuity. Furthermore, the attacker can create backdoors or plant malicious code, allowing them to maintain access to the system long after the initial attack.

With the ever-increasing number of cybersecurity threats, it is crucial to be proactive and stay informed about vulnerabilities in your digital assets. Thanks to the pro features of the s4e.io platform, individuals and businesses can quickly and easily learn about potential vulnerabilities in their devices and networks. By utilizing this service, businesses can safeguard themselves against potential cyberattacks proactively.

REFERENCES

• https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses
• https://www.redteam-pentesting.de/en/advisories/rt-sa-2021-007/-auerswald-compact-multiple-backdoors