high7.2Public exploit code
CVE-2017-16709
Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AwindInc SNMP Service - Command Injection (Metasploit)2019-09-05 · remote · linux · Verified
Impact
Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Crestron | Airmedia Am-100 Firmware | before 1.6.0 |
| Crestron | Airmedia Am-101 Firmware | before 2.7.0 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/154362/AwindInc-SNMP-Service-Command-Injection.html
- https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet#CVE-2017-16709
- https://www.tenable.com/security/research/tra-2019-20
- http://packetstormsecurity.com/files/154362/AwindInc-SNMP-Service-Command-Injection.html
- https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet#CVE-2017-16709
- https://www.tenable.com/security/research/tra-2019-20