Critical severity9.8NVD Advisory· Published Aug 3, 2021· Updated Jun 17, 2026
CVE-2021-27952
CVE-2021-27952
Description
Hardcoded default root credentials exist on the ecobee3 lite 4.5.81.200 device. This allows a threat actor to gain access to the password-protected bootloader environment through the serial console.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- ecobee3 lite/ecobee3 litedescription
Patches
Vulnerability mechanics
References
1- www.l9group.com/advisories/hard-coded-default-root-credentials-for-all-ecobee3-lite-devicesnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.