← back
CVE-2017-16709

CVE-2017-16709

EPSS 72.0%
Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/154362/AwindInc-SNMP-Service-Command-Injection.htmlunverifiedexploitdbwww.exploit-db.com/exploits/47353unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/154362/AwindInc-SNMP-Service-Command-Injection.htmlhttps://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet#CVE-2017-16709https://www.tenable.com/security/research/tra-2019-20