漏洞描述
Auerswald COMpact 5500R 7.8A and 8.0B devices contain an unauthenticated endpoint ("https://192.168.1[.]2/about_state"), enabling the bad actor to gain backdoor access to a web interface that allows for resetting the administrator password.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
thehackernews.comhttps://thehackernews.com/2021/12/secret-backdoors-found-in-german-made.html↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2021-40859↗www.redteam-pentesting.dehttps://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses↗www.redteam-pentesting.dehttps://www.redteam-pentesting.de/en/advisories/rt-sa-2021-007/-auerswald-compact-multiple-backdoors↗