What’s Vulnerable › Vulnerabilities

CVE-2021-42109

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-10-08 · updated 2026-06-17
• Weakness: CWE-1188

Description

VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root.

Affected products

• VITEC Avediastream M9305 Firmware: through 2021-04-30
• VITEC Avediastream M9325 Firmware: through 2021-04-30
• VITEC Avediastream M9400 Firmware: through 2021-04-30
• VITEC Avediastream M9405 Firmware: through 2021-04-30
• VITEC Avediastream M9605 Firmware: through 2021-04-30
• VITEC Avediastream R9300 Firmware: through 2021-04-30
• VITEC Avediastream R9310 Firmware: through 2021-04-30
• VITEC Avediastream R9350 Firmware: through 2021-04-30
• VITEC Exterity Avediaserver: through 2021-04-30
• VITEC Exterity Avediastream Encoders Firmware: through 2021-04-30

References

• https://whitehoodhacker.net/posts/2021-10-04-the-big-rick
• https://www.exterity.com
• https://whitehoodhacker.net/posts/2021-10-04-the-big-rick
• https://www.exterity.com

Get alerted when CVE-2021-42109 or the next vulnerability affects your stack