critical9.8Public exploit code
CVE-2021-38759
Raspberry Pi OS through 5.10 has the raspberry default password for the pi account.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Raspberry Pi 5.10 - Default Credentials2021-12-09 · remote · linux
Impact
Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Raspberrypi | Raspberry Pi Os Lite | through 5.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/165211/Raspberry-Pi-5.10-Default-Credentials.html
- https://arstechnica.com/gadgets/2022/04/raspberry-pi-os-axes-longstanding-default-user-account-in-the-name-of-security/
- https://www.cnvd.org.cn/flaw/show/CNVD-2021-43968
- https://www.raspberrypi.com/documentation/computers/configuration.html#change-the-default-password
- http://packetstormsecurity.com/files/165211/Raspberry-Pi-5.10-Default-Credentials.html
- https://arstechnica.com/gadgets/2022/04/raspberry-pi-os-axes-longstanding-default-user-account-in-the-name-of-security/
- https://www.cnvd.org.cn/flaw/show/CNVD-2021-43968
- https://www.raspberrypi.com/documentation/computers/configuration.html#change-the-default-password