Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port.
The chip does not implement or does not correctly perform access control to check whether users are authorized to access internal registers and test modes through the physical debug/test interface.
Link | Tags |
---|---|
https://documentation.media5corp.com/display/MP/DGW+Security+Improvement+Notes+v48.5.2718 | release notes vendor advisory |
https://github.com/ProxyStaffy/Mediatrix-CVE-2022-43096 | third party advisory exploit |