CVE-2021-42109: Vitec Avediastream m9305 Firmware

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root.

Affected products

  • Vitec Avediastream m9305 Firmware: up to and including 2021-04-30
  • Vitec Avediastream m9325 Firmware: up to and including 2021-04-30
  • Vitec Avediastream m9400 Firmware: up to and including 2021-04-30
  • Vitec Avediastream m9405 Firmware: up to and including 2021-04-30
  • Vitec Avediastream m9605 Firmware: up to and including 2021-04-30
  • Vitec Avediastream r9300 Firmware: up to and including 2021-04-30
  • Vitec Avediastream r9310 Firmware: up to and including 2021-04-30
  • Vitec Avediastream r9350 Firmware: up to and including 2021-04-30
  • Vitec Exterity Avediaserver: up to and including 2021-04-30
  • Vitec Exterity Avediastream Encoders Firmware: up to and including 2021-04-30

Published 2021-10-08. Last modified 2026-06-17.