CVE-2021-31477

Name of the Vulnerable Software and Affected Versions GE Reason RPV311 version 14A03

Description This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the firmware and filesystem of the device, which contain hard-coded default credentials. An attacker can leverage this issue to execute code in the context of the download user.

Recommendations For GE Reason RPV311 version 14A03, consider changing the hard-coded default credentials to prevent exploitation. As a temporary workaround, restrict access to the device to minimize the risk of exploitation.