CVE-2016-5640: Improper Neutralization of Special Elements used in a Command

Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. dot dot in the ATECOMMAND parameter...

PT-2016-2702

Name of the Vulnerable Software and Affected Versions Crestron AirMedia AM-100 versions prior to 1.4.0.13 Description The issue is related to a directory traversal vulnerability in the cgi-bin/rftest.cgi file of the Crestron AirMedia AM-100 presentation server's firmware. This vulnerability can b...