Privilege Escalation Vulnerability in VITEC Exterity IPTV Products
CVE-2021-42109

9.8CRITICAL

Key Information:

Vendor

Vitec

Status
Exterity Avediaserver
Vendor
CVE Published:
8 October 2021

What is CVE-2021-42109?

VITEC Exterity IPTV products are susceptible to a vulnerability that allows attackers to escalate their privileges to root. This weakness, identified in versions available until April 30, 2021, can potentially grant unauthorized access to critical system components, enabling an attacker to conduct harmful actions within the system. Organizations using these products should ensure that they are employing the latest security measures and updates to protect against any exploitation attempts.

References

https://whitehoodhacker.net/posts/2021-10-04-the-big-rick
x_refsource_MISC
https://www.exterity.com
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.