CVE-2021-40859

PoC —

CVSS 3.1

9.8 critical

EPSS

72%p99

Published

Dec 7, 2021 (Dec 7, 2021)

Modified

Jun 17, 2026

Description

Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device.

Vendors: auerswald
Products: compact 5500r firmware
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (72.0%)

In the news2 stories

Secret Backdoors Found in German

The Hacker NewsDec 22, 04:19 UTC · Dec 22, 2021Malware CVE-2021-40859

Experts found backdoors in a popular Auerswald VoIP appliance

Security AffairsDec 27, 15:37 UTC · Dec 27, 2021Malware CVE-2021-40859 CVE-2021-40856 CVE-2021-40857