exploitDog

CVE-2019-18184

Опубликовано: 27 нояб. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Средний

Описание

Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function.

Ссылки

https://www.crestron.com/en-US/Products/Video/DigitalMedia-Modular-Matrix/Output-Cards-Blades/DMC-STRO
Product
https://www.quantumleap.it/crestron-dmc-stro-remote-root-rce/
Exploit
Third Party Advisory
https://www.quantumleap.it/news/advisory/
Third Party Advisory
https://www.crestron.com/en-US/Products/Video/DigitalMedia-Modular-Matrix/Output-Cards-Blades/DMC-STRO
Product
https://www.quantumleap.it/crestron-dmc-stro-remote-root-rce/
Exploit
Third Party Advisory
https://www.quantumleap.it/news/advisory/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:crestron:dmc-stro_firmware:1.0:*:*:*:*:*:*:*

cpe:2.3:h:crestron:dmc-stro:-:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.21435

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

GHSA-rx4q-5jwm-r64w

github

больше 3 лет назад

Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function.

EPSS

Процентиль: 96%

0.21435

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-78