← Back

CVE-2021-42109

nvd nist
Published: Oct 8, 2021Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root.

Affected (10)

Vitec
10 products
Exterity Avediaserver
Exterity Avediastream Encoders Firmware
Avediastream M9605 Firmware
Avediastream M9400 Firmware
Avediastream M9405 Firmware
Avediastream M9305 Firmware
Avediastream R9300 Firmware
Avediastream R9310 Firmware
Avediastream M9325 Firmware
Avediastream R9350 Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Exterity Avediaserver
Up to 2021-04-30
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Exterity Avediastream Encoders Firmware
Up to 2021-04-30
Running on/withPlatform Versions
Vitec
Exterity Avediastream Encoders
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Avediastream M9605 Firmware
Up to 2021-04-30
Running on/withPlatform Versions
Vitec
Avediastream M9605
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Avediastream M9400 Firmware
Up to 2021-04-30
Running on/withPlatform Versions
Vitec
Avediastream M9400
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Avediastream M9405 Firmware
Up to 2021-04-30
Running on/withPlatform Versions
Vitec
Avediastream M9405
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Avediastream M9305 Firmware
Up to 2021-04-30
Running on/withPlatform Versions
Vitec
Avediastream M9305
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Avediastream R9300 Firmware
Up to 2021-04-30
Running on/withPlatform Versions
Vitec
Avediastream R9300
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Avediastream R9310 Firmware
Up to 2021-04-30
Running on/withPlatform Versions
Vitec
Avediastream R9310
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Avediastream M9325 Firmware
Up to 2021-04-30
Running on/withPlatform Versions
Vitec
Avediastream M9325
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Avediastream R9350 Firmware
Up to 2021-04-30
Running on/withPlatform Versions
Vitec
Avediastream R9350
All versions

Related CWEs

CWE-1188
Initialization of a Resource with an Insecure Default
The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

References (4)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.