CVE-2023-33743
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1 is vulnerable to improper access control, specifically allowing access to Android Debug Bridge (adb).
Risk Assessment
Improper access control may lead to unauthorized access to the system, posing a risk to data and device security within the organization.
Recommendation
It is recommended to update devices to the latest software version to mitigate this vulnerability and restrict access to adb.
Other vulnerabilities in TeleAdapt RoomCast TA-2400
See all- CVE-2023-33745Critical
TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1 are vulnerable to improper privilege management. After establishing an adb connection, entering the su command provides root access without requiring a password.
- CVE-2023-33744Critical
TeleAdapt RoomCast TA-2400 devices from versions 1.0 to 3.1 suffer from the use of hard-coded passwords (PINs), including values: 385521, 843646, and 592671.
- CVE-2023-33742High
TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1 suffers from cleartext storage of sensitive information: RSA private key in Update.exe.
Original NVD description (English source)
TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Access Control; specifically, Android Debug Bridge (adb) is available.