TX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related issue to CVE-2019-16734. To connect, the telnet service is used on port 23 with the default password of 059AnkJ for the root account. The user can then download the filesystem through preinstalled BusyBox utilities (e.g., tar and nc).
References
| Link | Resource |
|---|---|
| http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-296520 | Third Party Advisory |
| http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-296520 | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-296520 - Third Party Advisory |
13 Feb 2024, 16:47
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-798 |
08 Aug 2023, 14:22
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-287 |
09 Aug 2021, 17:56
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 10.0
v3 : 9.8 |
| CWE | CWE-798 | |
| CPE | cpe:2.3:o:trixie:tx9_automatic_food_dispenser_firmware:3.2.57:*:*:*:*:*:*:* cpe:2.3:h:trixie:tx9_automatic_food_dispenser:-:*:*:*:*:*:*:* |
|
| References | (MISC) http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-296520 - Third Party Advisory |
26 Jul 2021, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-07-26 21:15
Updated : 2024-11-21 06:15
NVD link : CVE-2021-37555
Mitre link : CVE-2021-37555
CVE.ORG link : CVE-2021-37555
JSON object : View
Products Affected
trixie
- tx9_automatic_food_dispenser_firmware
- tx9_automatic_food_dispenser
CWE
CWE-798
Use of Hard-coded Credentials