CVE-2023-6926 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Crestron AM-300

There is an OS command injection vulnerability in Crestron AM-300 firmware version 1.4499.00018 which may enable a user of a limited-access SSH session to escalate their privileges to root-level access...

CVE-2023-6926

CVE-2023-6926 concerns an OS command injection in Crestron AM-300 firmware version 1.4499.00018. A limited-access user over SSH could escalate privileges to root. Affected product: Crestron AM-300 (firmware 1.4499.00018). Reported CVSS/metrics indicate high impact with local, low-privilege, non-u...

CVE-2023-6926 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Crestron AM-300

There is an OS command injection vulnerability in Crestron AM-300 firmware version 1.4499.00018 which may enable a user of a limited-access SSH session to escalate their privileges to root-level access...