high8.8
CVE-2022-34102
Insufficient access control vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user can pause the uninstal…
Impact
Insufficient access control vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user can pause the uninstallation of an executable to gain a SYSTEM level command prompt.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Crestron | Airmedia | Version 4.3.1.39 |
References
- NVD record
- CVE.org record
- https://www.crestron.com/Security/Security_Advisories
- https://www.crestron.com/release_notes/airmedia_windows_installer_release_notes_5.5.1.84.pdf
- https://www.crestron.com/Security/Security_Advisories
- https://www.crestron.com/release_notes/airmedia_windows_installer_release_notes_5.5.1.84.pdf