high8.8
CVE-2022-40298
Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Win…
Impact
Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Crestron | Airmedia | Version 4.3.1.39 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.crestron.com/Security/Security_Advisories
- https://www.crestron.com/release_notes/airmedia_windows_installer_release_notes_5.5.1.84.pdf
- https://www.crestron.com/Security/Security_Advisories
- https://www.crestron.com/release_notes/airmedia_windows_installer_release_notes_5.5.1.84.pdf