CVE-2023-33745
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1 are vulnerable to improper privilege management. After establishing an adb connection, entering the su command provides root access without requiring a password.
Risk Assessment
Improper privilege management can lead to unauthorized access to the system, posing a serious threat to the security of organizational data and infrastructure.
Recommendation
It is recommended to update the device to the latest software version to mitigate this vulnerability and restrict access to the adb interface.
Other vulnerabilities in TeleAdapt RoomCast TA-2400
See all- CVE-2023-33744Critical
TeleAdapt RoomCast TA-2400 devices from versions 1.0 to 3.1 suffer from the use of hard-coded passwords (PINs), including values: 385521, 843646, and 592671.
- CVE-2023-33743Critical
TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1 is vulnerable to improper access control, specifically allowing access to Android Debug Bridge (adb).
- CVE-2023-33742High
TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1 suffers from cleartext storage of sensitive information: RSA private key in Update.exe.
Original NVD description (English source)
TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available after an adb connection, simply entering the su command provides root access (without requiring a password).