CVE-2021-37555

9.8 criticalEPSS 1.4%

Critical (9.8) in trixie tx9 automatic food dispenser firmware. EPSS 1.4% chance of exploitation in the next 30 days.

TX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related issue to CVE-2019-16734. To connect, the telnet service is used on port 23 with the default password of 059AnkJ for the root account. The user can then download the filesystem through preinstalled BusyBox utilities (e.g., tar and nc).

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2021-07-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trixie:tx9_automatic_food_dispenser_firmware

References

http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-296520
http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-296520

Check your stack JSON