CVE-2016-5640

Crestron AirMedia AM-100 devices (firmware before 1.4.0.13) are affected by CVE-2016-5640 due to a command injection path in the rftest.cgi component. The ATE_COMMAND parameter can be used to execute arbitrary OS commands on the device, enabling unauthenticated remote command execution. This is p...