CVE-2016-5639

CVE-2016-5639 Crestron AirMedia AM-100 のパストラバーサルとハッシュダンプ Metasploit モジュール CVE-2016-5639 を利用してハッシュをダンプし、パストラバーサルによってファイルを取得する、2つの類似したモジュールです。これらのモジュールを分けて作成したのは、ハッシュを「ダンプ」し、クラッキング用に正しくフォーマットして戦利品に追加する、という機能を持つコードを書く経験を積みたかったからです。ご提案があれば歓迎します。 脆弱性の最初の発見と文書化の功績は、おそらく Cylance に帰属します:...

CVE-2019-3929

CVE-2019-3929 Crestron/Barco/Extron/InFocus/TeqAV 远程命令注入 CVE-2019-3929 Metasploit 模块 根据 Tenable 的描述： 远程未经身份验证的攻击者可以通过向 HTTP 端点 filetransfer.cgi 发送精心构造的请求，以 root 身份执行操作系统命令。此漏洞似乎影响所有已知设备，包括 Crestron AM-100 固件 1.6.0.2、Crestron AM-101 固件 2.7.0.1、Barco wePresent WiPG-1000 固件 2.3.0.10、Barco wePresent...

CVE-2016-5640

CVE-2016-5640 Crestron AirMedia AM-100 RCE CVE-2016-5640 Metasploit モジュール ファームウェアバージョンが 1.4.0.13 より前の Crestron AirMedia AM-100 デバイスのワイヤレス診断ページにおける、リモートコマンドインジェクションの脆弱性を悪用するためのモジュールです。コマンドはサービスを実行しているアカウント（通常は root）として実行されます。これは、私がチェックの作成と cmdstager の使用経験を得たかったためにモジュールを作成した、古いエクスプロイトです。...

EUVD-2019-13542

Malware in sbrugna...

EUVD-2019-13541

Malware in sbrugna...

EUVD-2019-13517

Malware in sbrugna...

EUVD-2019-13543

Malware in sbrugna...

CVE-2019-3931

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to argumention injection to the curl binary via crafted HTTP requests to return.cgi. A remote, authenticated attacker can use this vulnerability to upload files to the device and ultimately execute code as root...

CVE-2019-3936

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 is vulnerable to denial of service via a crafted request to TCP port 389. The request will force the slideshow to transition into a "stopped" state. A remote, unauthenticated attacker can use this vulnerability to stop an acti...

CVE-2019-3938

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, and other configuration options in the file generated via the "export configuration" feature. The configuration file is encrypted using the awenc binary. The same binary can be used to decrypt any...

CVE-2019-3934

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code sending a crafted HTTP POST request to login.cgi. A remote, unauthenticated attacker can use this vulnerability to download the current slide image without knowing the access code...

CVE-2019-3937

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, slideshow passcode, and other configuration options in cleartext in the file /tmp/scfgdndf. A local attacker can use this vulnerability to recover sensitive data...

CVE-2019-3935

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to act as a moderator to a slide show via crafted HTTP POST requests to conference.cgi. A remote, unauthenticated attacker can use this vulnerability to start, stop, and disconnect active slideshows...

CVE-2019-3932

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to authentication bypass due to a hard-coded password in return.tgi. A remote, unauthenticated attacker can use this vulnerability to control external devices via the uartbridge...

CVE-2019-3928

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allow any user to obtain the presentation passcode via the iso.3.6.1.4.1.3212.100.3.2.7.4 OIDs. A remote, unauthenticated attacker can use this vulnerability to access a restricted presentation or to become the presenter...

CVE-2019-3925

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.9.3. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root...

CVE-2019-3939

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin/admin and moderator/moderator for the web interface. An unauthenticated, remote attacker can use these credentials to gain privileged access to the device...

Exploit for Cross-site Scripting in Crestron Am-100_Firmware

CVE-2019-3929 Crestron/Barco/Extron/InFocus/TeqAV Remote Comma...

Barco/AWIND OEM Presentation Platform Unauthenticated Remote Command Injection

Exploit Title: Barco/AWIND OEM Presentation Platform Unauthenticated Remote Command Injection Date: 05/01/2019 Exploit Author: Jacob Baines Tested on: Crestron AM-100 1.6.0.2 CVE : CVE-2019-3929 PoC Video: https://www.youtube.com/watch?v=q-PIjnPcu2k Advisory:...

Barco / AWIND OEM Presentation Platform Unauthenticated Remote Command Injection Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Barco/AWIND OEM Presentation Platform Unauthenticated Remote Command Injection Exploit Author: Jacob Baines Tested on: Crestron AM-100 1.6.0.2 CVE : CVE-2019-3929 PoC Video: https://www.youtube.com/watch?v=q-PIjnPcu2k...