CVE-2019-3929

CVE-2019-3929 Crestron/Barco/Extron/InFocus/TeqAV 远程命令注入 CVE-2019-3929 Metasploit 模块 根据 Tenable 的描述： 远程未经身份验证的攻击者可以通过向 HTTP 端点 filetransfer.cgi 发送精心构造的请求，以 root 身份执行操作系统命令。此漏洞似乎影响所有已知设备，包括 Crestron AM-100 固件 1.6.0.2、Crestron AM-101 固件 2.7.0.1、Barco wePresent WiPG-1000 固件 2.3.0.10、Barco wePresent...

Command injection

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pr...

CVE-2019-3929

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pr...