.. / CVE-2021-40856

• Auth Bypass
• Nuclei
• Web

Exploit for Auerswald COMfortel 1400/2600/3600 IP - Authentication Bypass (CVE-2021-40856)

Description:

Auerswald COMfortel 1400/2600/3600 IP is susceptible to an authentication bypass vulnerability. Inserting the prefix “/about/../” allows bypassing the authentication check for the web-based configuration management interface. This enables attackers to gain access to the login credentials used for authentication at the PBX, among other data.

Nuclei Template

View the template here CVE-2021-40856.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-40856.yaml

References: