← back
CVE-2017-16709

CVE-2017-16709

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 72%
from disclosure to weapon421 days
Published on NVDJul 11
1st PoC+421d
metasploit+259d
exploitation probability
72%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors.
Affected products
n/a · n/a
public PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/47353cve_referencepacketstormsecurity.com/files/154362/AwindInc-SNMP-Service-Command-Injection.htmlunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://packetstormsecurity.com/files/154362/AwindInc-SNMP-Service-Command-Injection.htmlhttps://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet#CVE-2017-16709https://www.tenable.com/security/research/tra-2019-20