Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-6926

There is an OS command injection vulnerability in Crestron AM-300 firmware version 1.4499.00018 which may enable a user of a limited-access SSH session to escalate their privileges to root-level access.

Published

2024-01-23T20:15:45.233

Last Modified

2024-11-21T08:44:50.977

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.4 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-78
  • Type: Primary
    CWE-78
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System crestron am-300_firmware 1.4499.00018 Yes
Hardware crestron am-300 - No
References