CVE:CVE-2021-40858
CNNVD:CNNVD-202112-387
Auerswald Compact 系列是德国Auerswald公司的一种 Ict 解决方案。
Auerswald COMpact 5500R PBX 基于 Web 的管理界面中存在安全漏洞，该漏洞允许具有“sub-admin”权限的用户访问 PBX 文件系统上的任何文件。8.0B 及以下版本受到影响。
solution:Upgrade auerswald compact_5500r_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald compact_5200r_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald compact_5000r_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald compact_4000_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald commander_6000r_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald commander_6000rx_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald commander_business(19")_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald commander_basic.2(19")_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald compact_5010_voip_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]; Upgrade auerswald compact_5020_voip_ip_firmware to a higher version than 8.0b,and avoid the version (,8.0b]