CVE-2019-18184
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 8.2%
exploitation probability
8.2%top 5% of all CVEs
observed exploitation
nono source reports it
Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function.
Affected products
n/a · n/aReferences
https://cyberleap.it/advisories/cve-2019-18184https://web.archive.org/web/20201221031912/https://www.quantumleap.it/crestron-dmc-stro-remote-root-rce/https://www.crestron.com/en-US/Products/Video/DigitalMedia-Modular-Matrix/Output-Cards-Blades/DMC-STROhttps://www.quantumleap.it/crestron-dmc-stro-remote-root-rce/https://www.quantumleap.it/news/advisory/