CVE-2016-5640

2016-08-0301:00:00

certcc

www.cve.org

9.8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.3%

JSON

Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a … (dot dot) in the ATE_COMMAND parameter.

References

www.kb.cert.org/vuls/id/603047

www.securityfocus.com/bid/92216

github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2016-05-002.md