CVE-2021-33887: Onepeloton TTR01 Firmware

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Insufficient verification of data authenticity in Peloton TTR01 up to and including PTV55G allows an attacker with physical access to boot into a modified kernel/ramdisk without unlocking the bootloader.

Affected products

• Onepeloton TTR01 Firmware: up to and including ptv55g

Published 2021-06-15. Last modified 2026-06-17.