PT-2021-22288 · Raspberry Pi Foundation · Raspberry Pi

Published 2021-12-07 · Updated 2026-02-12 · CVE-2021-38759

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Raspberry Pi OS versions through 5.10

Description Raspberry Pi OS through version 5.10 uses a default password for the 'pi' account. If this default password is not changed, attackers can obtain administrator privileges.

Recommendations Raspberry Pi OS versions prior to 5.10: Change the default password for the 'pi' account immediately.

Exploit

Fix

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2021-38759

Affected Products

Raspberry Pi

References · 18

• 🔥 https://github.com/rdomanski/Exploits_and_Advisories · Exploit
• 🔥 https://exploit-db.com/exploits/50576 · Exploit
• https://osv.dev/vulnerability/CVE-2021-38759 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38759 · Security Note
• https://raspberrypi.com/documentation/computers/configuration.html#change-the-default-password · Vendor Advisory
• https://t.me/cvenotify/29492 · Telegram Post
• https://t.me/pentestingnews/32466 · Telegram Post
• https://cnvd.org.cn/flaw/show/CNVD-2021-43968 · Note
• https://t.me/poxek/274 · Telegram Post
• http://packetstormsecurity.com/files/165211/Raspberry-Pi-5.10-Default-Credentials.html · Note
• https://t.me/malwr/5520 · Telegram Post
• https://twitter.com/oops4041555/status/2021905307514155462 · Twitter Post
• https://twitter.com/kimmydotzip/status/1740634078360350978 · Twitter Post
• https://t.me/cibsecurity/33535 · Telegram Post
• https://twitter.com/Pascal_0x90/status/1874322093623652462 · Twitter Post