Описание
Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell.
Ссылки
- Vendor Advisory
- Release NotesVendor Advisory
- Vendor Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:crestron:airmedia:4.3.1.39:*:*:*:*:windows:*:*
EPSS
Процентиль: 48%
0.00246
Низкий
8.8 High
CVSS3
Дефекты
CWE-732
CWE-732
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell.
EPSS
Процентиль: 48%
0.00246
Низкий
8.8 High
CVSS3
Дефекты
CWE-732
CWE-732