CVE-2021-42109 Privilege escalation in n/a
Attackers can escalate privileges to root on VITEC Exterity IPTV products, compromising the entire device.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-42109?
CVE-2021-42109 is a critical vulnerability in n/a, published on 8 Oct 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root.
Weakness: CWE-1188
Which versions are affected by CVE-2021-42109?
It affects 10 products.
Products include Vitec Avediastream M9305 Firmware, Vitec Avediastream M9325 Firmware, Vitec Avediastream M9400 Firmware, Vitec Avediastream M9405 Firmware, Vitec Avediastream M9605 Firmware, Vitec Avediastream R9300 Firmware and 4 more.
How do I fix CVE-2021-42109?
No fix has been published for CVE-2021-42109 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-42109 being exploited?
There is no known exploitation of CVE-2021-42109 in the wild and no public exploit code.
Sources
Also known as GHSA-24gx-p8r7-xrqm.