Exposures › CVE-2019-3929

CVE-2019-3929

Severity
high · on CISA KEV actively exploited
Source
CISA-KEV · kev
Published
2022-04-15
Reference
⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.

Players implicated

Crestron · vendorMultiple Products · product

Description

Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.