Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2018-5553

Crestron DGE-100 Console Command Injection (FIXED)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
rapid7

Description

The Crestron Console service running on DGE-100, DM-DGE-200-C, and TS-1542-C devices with default configuration and running firmware versions 1.3384.00049.001 and lower are vulnerable to command injection that can be used to gain root-level access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Crestron DGE-100

  • unspecified to ≤ 1.3384.00049.001affected

Crestron TS-1542-C

  • unspecified to ≤ 1.3384.00049.001affected

Crestron DM-DGE-200-C

  • unspecified to ≤ 1.3384.00049.001affected

References