CVE:CVE-2021-40857
CNNVD:CNNVD-202112-376
Auerswald Compact 系列是德国Auerswald公司的一种 Ict 解决方案。
Auerswald COMpact 5500R PBX 的基于 Web 的管理界面中存在安全漏洞，该漏洞允许低权限用户访问管理用户帐户的密码。受影响的版本包括 8.0B 及以下版本。
solution:Upgrade auerswald compact_5500r_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald compact_5200r_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald compact_5000r_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald compact_4000_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald commander_6000r_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald commander_6000rx_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald commander_business(19")_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald commander_basic.2(19")_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald compact_5010_voip_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald compact_5020_voip_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]