CVE-2018-5553 — Crestron DGE-100 Console Command Injection (FIXED)
The Crestron Console service running on DGE-100, DM-DGE-200-C, and TS-1542-C devices with default configuration and running firmware versions 1.3384.00049.001 and lower are vuln…
Published: 2018-07-10 · CVSS: 9.8 · CVSS 3.0
The Crestron Console service running on DGE-100, DM-DGE-200-C, and TS-1542-C devices with default configuration and running firmware versions 1.3384.00049.001 and lower are vulnerable to command injection that can be used to gain root-level access.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7