The vulnerability of the microprogramming software of the presentation server Crestron AirMedia AM-100 allows a intruder to execute arbitrary commands.

The vulnerability of the bin/rftest.cgi file in the Crestron AirMedia AM-100 presentation server’s microprogramming software is related to deficiencies in pathname restriction. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands via the ATEcommand parameter...