Raspberrypi - vulnerabilities (CVEs)

3 CVEs in 5 products, 0 in the last 30 days, newest from 2021-12-07.

Products

• Raspberry Pi 3 Model B+ Firmware - 2 CVEs
• Raspberry Pi 4 Model B Firmware - 1 CVEs
• Raspberry Pi Os Lite - 1 CVEs
• Raspberry Pi 3 Model B+ - 0 CVEs
• Raspberry Pi 4 Model B - 0 CVEs

Newest CVEs of Raspberrypi

• CVE-2021-38759 - CVSS 9.8 (critical), 2021-12-07: Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges.
• CVE-2021-38545 - CVSS 5.9 (medium), 2021-08-11: Raspberry Pi 3 B+ and 4 B devices through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipment, allow remote…
• CVE-2018-18068 - CVSS 9.8 (critical), 2019-04-04: The ARM-based hardware debugging feature on Raspberry Pi 3 module B+ and possibly other devices allows non-secure EL1 code to read/write any EL3 (the highest…