CVE-2019-18184: OS Command Injection
Published Nov 27, 2019
·Updated
Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function.
Affected Software
4 affected components
Crestron Dmc-stro Firmware=1.0
Crestron DMC-STRO
All of the following
Crestron Dmc-stro Firmware=1.0
Crestron DMC-STRO
Event History
Nov 27, 2019
CVE Published
via MITRE·03:59 PM
Data Sourced
via MITRE·03:59 PM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2019-18184?
CVE-2019-18184 is a vulnerability that allows remote command execution as root on Crestron DMC-STRO 1.0 devices via shell metacharacters to the ping function.
2
What is the severity of CVE-2019-18184?
The severity of CVE-2019-18184 is critical with a CVSS score of 9.8.
3
How can I exploit CVE-2019-18184?
We do not provide information or support on how to exploit vulnerabilities. Please refer to the official references for more information.
4
How do I fix CVE-2019-18184?
To fix CVE-2019-18184, it is recommended to update the Crestron DMC-STRO firmware to a version that has patched the vulnerability.
5
Where can I find more information about CVE-2019-18184?
You can find more information about CVE-2019-18184 on the official Crestron website and the Quantum Leap IT advisory.