Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
@smrdddd くだらないかどうかは個人の判断になると思うのですが、この脆弱性は有名ですね CVSS9.8の CVEになります。 生成AI以前にあった脆弱性になりますが https://nvd.nist.gov/vuln/detail/CVE-2021-38759
Post summary
The user points to CVE‑2021‑38759, highlighting its high CVSS score and providing an NVD link, but offers no further technical details or exploitation information.
The "RCE" in question is parsing file protocols as what they are in markdown documents where you can hide URIs. Remember that they gave a CVE to the Raspberry Pi foundation because their default username and password for their prebuilt images are pi:raspberry (CVE-2021-38759).
Post summary
The text references CVE-2021-38759, noting an RCE via markdown parsing and default credentials, but it lacks evidence of PoC, exploit, patch, or active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | raspberrypi | raspberry_pi_os_lite | - | - | - |