← Back

Ttr01 Firmware

ttr01_firmware

Vendor: Onepeloton • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-40526
1Onepeloton
1Ttr01 Firmware
Jun 17, 2026
Oct 25, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Incorrect calculation of buffer size vulnerability in Peleton TTR01 up to and including PTV55G allows a remote attacker to trigger a Denial of Service attack through the GymKit daemon process by exploiting a heap overflo...Show more
Incorrect calculation of buffer size vulnerability in Peleton TTR01 up to and including PTV55G allows a remote attacker to trigger a Denial of Service attack through the GymKit daemon process by exploiting a heap overflow in the network server handling the Apple GymKit communication. This can lead to an Apple MFI device not being able to authenticate with the Peleton BikeShow less
CVE-2021-33887
1Onepeloton
1Ttr01 Firmware
Jun 17, 2026
Jun 15, 2021
N/A· v4
6.8 MEDIUM· v3
7.2 HIGH· v2
Insufficient verification of data authenticity in Peloton TTR01 up to and including PTV55G allows an attacker with physical access to boot into a modified kernel/ramdisk without unlocking the bootloader.