CVE-2021-37555

TX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related issue to CVE-2019-16734. To connect, the telnet service is used on port 23 with the default password of 059AnkJ for the root account. The user can then download the filesystem through preinstalled BusyBox utilities (e.g., tar and nc).

• CWE-798

• http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-296520Third Party Advisory
• http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-296520Third Party Advisory

Published

Jul 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3755Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-37550In JetBrains YouTrack before 2021.2.16363, time-unsafe compa…7.5
• CVE-2021-37551In JetBrains YouTrack before 2021.2.16363, system user passw…5.3
• CVE-2021-37552In JetBrains YouTrack before 2021.2.17925, stored XSS was po…5.4
• CVE-2021-37553In JetBrains YouTrack before 2021.2.16363, an insecure PRNG …7.5
• CVE-2021-37554In JetBrains YouTrack before 2021.3.21051, a user could see …4.3
• CVE-2021-37556A SQL injection vulnerability in reporting export in Centreo…8.8
• CVE-2021-37557A SQL injection vulnerability in image generation in Centreo…8.8
• CVE-2021-37558A SQL injection vulnerability in a MediaWiki script in Centr…9.8
• CVE-2021-3756libmysofa is vulnerable to Heap-based Buffer Overflow9.8
• CVE-2021-37560MediaTek microchips, as used in NETGEAR devices through 2021…8.8
• CVE-2021-37561MediaTek microchips, as used in NETGEAR devices through 2021…8.8