CVE-2021-38759

Raspberry Pi OS through 5.10 has the raspberry default password for the pi account

published December 7, 2021

CVSS
โ€”
EPSS
16%
Percentile
96.8
In the wild
Unconfirmed
What it is

โš ๏ธ Leaving the default password unchanged could hand attackers the keys to your Raspberry Pi kingdom! ๐Ÿ”‘ Think of it like leaving your front door wide open with a sign that says 'Welcome!' โ€” anyone can walk right in and take over your home! An attacker armed with this knowledge can gain administrator privileges, potentially hijacking your device to run any unauthorized commands. Imagine the chaos if they decided to turn your beloved Raspberry Pi into a puppet for their mischievous plans!

Put simply

Think of it like leaving your front door wide open with a sign that says 'Welcome!' โ€” anyone can walk right in and take over your home! This vulnerability exists because the default password for the 'pi' account remains unchanged in Raspberry Pi OS versions through 5.10, allowing unauthorized users to gain admin access with minimal effort.

What to do

An attacker armed with this knowledge can gain administrator privileges, potentially hijacking your device to run any unauthorized commands. Imagine the chaos if they decided to turn your beloved Raspberry Pi into a puppet for their mischievous plans! Change the default password for the 'pi' account immediately to something strong and unique. Consider using a password manager to generate and store your new credentials securely. Regularly review your device settings to maintain security best practices! You've got this! With just a few tweaks, your Raspberry Pi will be fortified and ready for action! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15666 ยท 96.8th percentile
Published
2021-12-07T20:51Z
EPSS history
Timeline
  • 07 DEC 20:51Z
    Raspberry Pi OS through 5.10 has the raspberry default password for the pi account
    cvelistv5