CVE-2023-33745 - TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available after an adb connection, simply entering the su command provides root access (without requiring a password)

Back Back to CVE browser

CRITICAL

TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available after an adb connection, simply entering the su command provides root access (without requiring a password)

Published Jul 27, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.96%

Description

TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available after an adb connection, simply entering the su command provides root access (without requiring a password).

Affected products

Vendor Teleadapt Product Roomcast TA-2400 Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  <=3.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Teleadapt

Roomcast TA-2400

n/a

Version	Status	Constraints
1.0	affected	<=3.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (2)

http://packetstormsecurity.com/files/173764/RoomCast-TA-2400-Cleartext-Private-Key-Improper-Access-Control.html
Third Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-37897
Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/173764/RoomCast-TA-2400-Cleartext-Private-Key-Improper-Access-Control.html		Third Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-37897		Advisory