The vulnerability of the microprogramming software of the presentation server Crestron AirMedia AM-100 allows a intruder to execute arbitrary commands.

The vulnerability of the bin/rftest.cgi file in the Crestron AirMedia AM-100 presentation server’s microprogramming software is related to deficiencies in pathname restriction. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands via the ATEcommand parameter...

CVE-2016-5640

Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. dot dot in the ATECOMMAND parameter...

PT-2016-2702

Name of the Vulnerable Software and Affected Versions Crestron AirMedia AM-100 versions prior to 1.4.0.13 Description The issue is related to a directory traversal vulnerability in the cgi-bin/rftest.cgi file of the Crestron AirMedia AM-100 presentation server's firmware. This vulnerability can b...

CVE-2016-5640: Improper Neutralization of Special Elements used in a Command

Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. dot dot in the ATECOMMAND parameter...