CVE-2023-33745
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1 are vulnerable to improper privilege management. After establishing an adb connection, entering the su command provides root access without requiring a password.
Risk Assessment
Improper privilege management can lead to unauthorized access to the system, posing a serious threat to the security of organizational data and infrastructure.
Recommendation
It is recommended to update the device to the latest software version to mitigate this vulnerability and restrict access to the adb interface.
Original NVD description (English source)
TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available after an adb connection, simply entering the su command provides root access (without requiring a password).