TRIXIE TX9 Automatic Food Dispenser up to 3.2.57 Telnet Service hard-coded password

Summaryinfo

A vulnerability classified as problematic has been found in TRIXIE TX9 Automatic Food Dispenser up to 3.2.57. The impacted element is an unknown function of the component Telnet Service. Performing a manipulation results in hard-coded password. This vulnerability was named CVE-2021-37555. The attack may be initiated remotely. There is no available exploit. It is suggested to use restrictive firewalling.

Detailsinfo

A vulnerability classified as critical has been found in TRIXIE TX9 Automatic Food Dispenser up to 3.2.57. This affects some unknown processing of the component Telnet Service. The manipulation with an unknown input leads to a hard-coded password vulnerability. CWE is classifying the issue as CWE-259. The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components. This is going to have an impact on confidentiality, integrity, and availability.

The weakness was presented 07/27/2021. It is possible to read the advisory at urn.kb.se. This vulnerability is uniquely identified as CVE-2021-37555. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1078.001 according to MITRE ATT&CK.

It is possible to mitigate the weakness by firewalling .

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• TRIXIE

Name

• TX9 Automatic Food Dispenser

Version

• 3.2.0
• 3.2.1
• 3.2.2
• 3.2.3
• 3.2.4
• 3.2.5
• 3.2.6
• 3.2.7
• 3.2.8
• 3.2.9
• 3.2.10
• 3.2.11
• 3.2.12
• 3.2.13
• 3.2.14
• 3.2.15
• 3.2.16
• 3.2.17
• 3.2.18
• 3.2.19
• 3.2.20
• 3.2.21
• 3.2.22
• 3.2.23
• 3.2.24
• 3.2.25
• 3.2.26
• 3.2.27
• 3.2.28
• 3.2.29
• 3.2.30
• 3.2.31
• 3.2.32
• 3.2.33
• 3.2.34
• 3.2.35
• 3.2.36
• 3.2.37
• 3.2.38
• 3.2.39
• 3.2.40
• 3.2.41
• 3.2.42
• 3.2.43
• 3.2.44
• 3.2.45
• 3.2.46
• 3.2.47
• 3.2.48
• 3.2.49
• 3.2.50
• 3.2.51
• 3.2.52
• 3.2.53
• 3.2.54
• 3.2.55
• 3.2.56
• 3.2.57

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion