high8.8
CVE-2022-34100
A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command p…
Impact
A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file structure during a repair operation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Crestron | Airmedia | Version 4.3.1.39 |
References
- NVD record
- CVE.org record
- https://www.crestron.com/Security/Security_Advisories
- https://www.crestron.com/release_notes/airmedia_windows_installer_release_notes_5.5.1.84.pdf
- https://www.crestron.com/Security/Security_Advisories
- https://www.crestron.com/release_notes/airmedia_windows_installer_release_notes_5.5.1.84.pdf