CVE-2021-40856

PoC ×3—

CVSS 3.1

7.5 high

EPSS

50%p99

Published

Dec 13, 2021 (Dec 13, 2021)

Modified

Jun 17, 2026

Description

Auerswald COMfortel 1400 IP and 2600 IP before 2.8G devices allow Authentication Bypass via the /about/../ substring.

Vendors: auerswald
Products: comfortel 3600 ip firmware, comfortel 2600 ip firmware, comfortel 1400 ip firmware
Weakness: CWE-706
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (50.1%)

In the news1 stories

Experts found backdoors in a popular Auerswald VoIP appliance

Security AffairsDec 27, 15:37 UTC · Dec 27, 2021Malware CVE-2021-40859 CVE-2021-40856 CVE-2021-40857

47