CVE-2021-40858

Name of the Vulnerable Software and Affected Versions Auerswald COMpact 5500R versions prior to 8.2B

Description The issue allows a sub-admin to read the cleartext Admin password via the fileName parameter with a substring such as ../../etc/passwd. This enables Arbitrary File Disclosure.

Recommendations For versions prior to 8.2B, update to version 8.2B or later to resolve the issue. As a temporary workaround, consider restricting access to the fileName parameter to minimize the risk of exploitation.