CVE-2021-37555: TX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related issue to...

Security readout for executives and security teams

This CVE describes TX9 Automatic Food Dispenser v3.2.57 devices exposing root-level shell access through telnet using default credentials. If reachable, an attacker could fully control the device and copy its filesystem. Business urgency depends on whether these devices exist and whether telnet is reachable from untrusted networks. Exposure is likely limited to TX9 Automatic Food Dispenser v3.2.57 devices where telnet is enabled and reachable. Risk increases sharply if port 23 is exposed to the internet, guest Wi-Fi, vendor networks, or other untrusted segments. Treat this as high priority if any affected device is deployed or network-reachable. Root access to an embedded device can support tampering, persistence, and movement into poorly segmented environments, even though no active exploitation is cited. Mitigation focus: Identify any TX9 Automatic Food Dispenser v3.2.57 devices in the environment.; Disable telnet if the device supports it.; Change default root credentials if the device supports credential changes..

Prepared

Jun 2, 2026, 19:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.