CVE-2021-40858: Auerswald Commander 6000r IP Firmware

Medium severity, CVSS 4.9. EPSS: 2.5% chance of exploitation in the next 30 days.

Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure. A sub-admin can read the cleartext Admin password via the fileName=../../etc/passwd substring.

Affected products

• Auerswald Commander 6000r IP Firmware: up to and including 8.0b
• Auerswald Commander 6000rx IP Firmware: up to and including 8.0b
• Auerswald Commander basic.2(19") IP Firmware: up to and including 8.0b
• Auerswald Commander business(19") IP Firmware: up to and including 8.0b
• Auerswald Compact 4000 IP Firmware: up to and including 8.0b
• Auerswald Compact 5000r IP Firmware: up to and including 8.0b
• Auerswald Compact 5010 Voip IP Firmware: up to and including 8.0b
• Auerswald Compact 5020 Voip IP Firmware: up to and including 8.0b
• Auerswald Compact 5200r IP Firmware: up to and including 8.0b
• Auerswald Compact 5500r IP Firmware: up to and including 8.0b

Published 2021-12-13. Last modified 2026-06-17.