CVE-2021-42109
Critical
Description
VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root.
SeverityCritical
CVSS9.8
Exploit probability—
ProductVitec Exterity Avediaserver
PublishedOct 8, 2021
First seenOct 8, 2021
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vitec exterity_avediaserver | v ≤ 2021-04-30 | — |
| vitec exterity_avediastream_encoders_firmware | v ≤ 2021-04-30 | — |
| vitec avediastream_m9605_firmware | v ≤ 2021-04-30 | — |
| vitec avediastream_m9400_firmware | v ≤ 2021-04-30 | — |
| vitec avediastream_m9405_firmware | v ≤ 2021-04-30 | — |
| vitec avediastream_m9305_firmware | v ≤ 2021-04-30 | — |
| vitec avediastream_r9300_firmware | v ≤ 2021-04-30 | — |
| vitec avediastream_r9310_firmware | v ≤ 2021-04-30 | — |
| vitec avediastream_m9325_firmware | v ≤ 2021-04-30 | — |
| vitec avediastream_r9350_firmware | v ≤ 2021-04-30 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.