CVE-2019-3929: Crestron Multiple Products: aktif olarak istismar edilen açık

Açıklama (NVD)

Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.

Özet bilgiler

EPSS

%98,95 (yüzdelik 100)

Yama

Yok / bilinmiyor

KEV

Eklenme: 2022-04-15 · Son tarih: 2022-05-06

Gerekli aksiyon: Apply updates per vendor instructions.

Kaynaklar

• NVD kaydı
• CISA KEV kataloğu