CVE-2022-40298

2022-09-2223:30:16

mitre

www.cve.org

crestron airmedia windows application

version 4.3.1.39

insecure permissions

privilege escalation

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell.