CVE-2021-36797

2021-07-1916:14:50

mitre

www.cve.org

victron energy

venus os

root access

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

30.6%

JSON

In Victron Energy Venus OS through 2.72, root access is granted by default to anyone with physical access to the device. NOTE: the vendor disagrees with the reporter’s opinion about an alleged “security best practices” violation

References

github.com/victronenergy/venus/issues/836