Vulnerability · Published Jul 26, 2021 · Assigned by mitre

CVE-2021-37555

Critical 9.8

In plain English

A critical-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 72% of all known vulnerabilities).

Severity (CVSS NVD)9.8Critical

Exploit odds (30 days)1.4%top 27.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

TX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related issue to CVE-2019-16734. To connect, the telnet service is used on port 23 with the default password of 059AnkJ for the root account. The user can then download the filesystem through preinstalled BusyBox utilities (e.g., tar and nc).

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-296520 x_refsource_MISC