Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9hpv-x27v-56h8

Опубликовано: 14 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file structure during a repair operation.

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file structure during a repair operation.

EPSS

Процентиль: 45%
0.00225
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
nvd
больше 3 лет назад

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file structure during a repair operation.

CVSS3: 8.8
fstec
больше 3 лет назад

Уязвимость cистемы совместных презентаций Crestron AirMedia, связанная с неправильной обработка привилегий, позволяющая нарушителю получить доступ к командной строке с уровнем привилегий SYSTEM

EPSS

Процентиль: 45%
0.00225
Низкий

8.8 High

CVSS3