Command injection

2019-11-2716:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

89.0%

Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function.

CPENameOperatorVersion
dmc-stro_firmwareeq1.0

CPE	Name	Operator	Version
	dmc-stro_firmware	eq	1.0

References

www.crestron.com/en-US/Products/Video/DigitalMedia-Modular-Matrix/Output-Cards-Blades/DMC-STRO

www.quantumleap.it/crestron-dmc-stro-remote-root-rce/

www.quantumleap.it/news/advisory/