CVE-2023-33744
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
TeleAdapt RoomCast TA-2400 devices from versions 1.0 to 3.1 suffer from the use of hard-coded passwords (PINs), including values: 385521, 843646, and 592671.
Risk Assessment
The use of hard-coded passwords may lead to unauthorized access to devices, posing a serious security threat to the organization's network.
Recommendation
It is recommended to update the device firmware to the latest version that addresses the hard-coded password issue and to implement strong, unique passwords for each device.
Other vulnerabilities in TeleAdapt RoomCast TA-2400
See all- CVE-2023-33745Critical
TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1 are vulnerable to improper privilege management. After establishing an adb connection, entering the su command provides root access without requiring a password.
- CVE-2023-33743Critical
TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1 is vulnerable to improper access control, specifically allowing access to Android Debug Bridge (adb).
- CVE-2023-33742High
TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1 suffers from cleartext storage of sensitive information: RSA private key in Update.exe.
Original NVD description (English source)
TeleAdapt RoomCast TA-2400 1.0 through 3.1 suffers from Use of a Hard-coded Password (PIN): 385521, 843646, and 592671.