CVE-2021-42109
VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root.
VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root.
- Record
CVE-2021-42109- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-1188
- Updated
- 2026-11-02
CVE List No score
VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root.
- Record
CVE-2021-42109- Updated
- 2026-11-02
EUVDEUVD-2021-29095 No score
VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root.
- Record
EUVD-2021-29095- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-24gx-p8r7-xrqm
VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root.
VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root.
- Record
GHSA-24gx-p8r7-xrqm- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-269
- Updated
- 2026-11-02
Affected products
- vitec avediastream m9305 firmware
- vitec avediastream m9325 firmware
- vitec avediastream m9400 firmware
- vitec avediastream m9405 firmware
- vitec avediastream m9605 firmware
- vitec avediastream r9300 firmware
- vitec avediastream r9310 firmware
- vitec avediastream r9350 firmware
- vitec exterity avediaserver
- vitec exterity avediastream encoders firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-42109 is a critical vulnerability (CVSS 9.8) in Vitec Avediastream M9305 Firmware, published October 8, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.66%, the 76th percentile. No source names a fixed version.