CVE-2018-5553

🗓️ 10 Jul 2018 16:00:00Reported by rapid7Type

The Crestron Console service on DGE-100, DM-DGE-200-C, and TS-1542-C devices with firmware 1.3384.00049.001 and lower allows command injection

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2018-5553 Crestron DGE-100 Console Command Injection (FIXED)	10 Jul 201816:00	–	cvelist
EUVD	EUVD-2018-17322	7 Oct 202500:30	–	euvd
NVD	CVE-2018-5553	10 Jul 201816:29	–	nvd
OSV	CVE-2018-5553	10 Jul 201816:29	–	osv
Prion	Command injection	10 Jul 201816:29	–	prion
Zero Day Initiative	Crestron Multiple Products CTP Console PING Command Injection Remote Code Execution Vulnerability	14 Aug 201800:00	–	zdi

NVD

Node

crestron dge-100_firmwareRange≤1.3384.00049.001

AND

crestron dge-100Match-

Node

crestron dm-dge-200-c_firmwareRange≤1.3384.00049.001

AND

crestron dm-dge-200-cMatch-

Node

crestron ts-1542-c_firmwareRange≤1.3384.00049.001

AND

crestron ts-1542-cMatch-

[
  {
    "product": "DGE-100",
    "vendor": "Crestron",
    "versions": [
      {
        "lessThanOrEqual": "1.3384.00049.001",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "TS-1542-C",
    "vendor": "Crestron",
    "versions": [
      {
        "lessThanOrEqual": "1.3384.00049.001",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "DM-DGE-200-C",
    "vendor": "Crestron",
    "versions": [
      {
        "lessThanOrEqual": "1.3384.00049.001",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
support	www.support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet
blog	www.blog.rapid7.com/2018/06/12/r7-2018-15-cve-2018-5553-crestron-dge-100-console-command-injection-fixed/

21 Nov 2024 04:09Current

10High risk

Vulners AI Score10

CVSS 39.8

CVSS 210

EPSS0.08087

CWE-78