Exploitation Summary
EIP tracks 2 public exploits for CVE-2017-16709.
PoCs published by Metasploit, including Metasploit module exploits/linux/snmp/awind_snmp_exec.
AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in AwindInc and OEM'ed products via SNMP. It injects a payload into the SNMP OID `1.3.6.1.4.1.3212.100.3.2.9.1.0`, which is then executed by triggering a firmware upgrade process.
Description
Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors.
Exploits (2)
This Metasploit module exploits a command injection vulnerability in AwindInc and OEM'ed products via SNMP. It injects a payload into the SNMP OID `1.3.6.1.4.1.3212.100.3.2.9.1.0`, which is then executed by triggering a firmware upgrade process.
This Metasploit module exploits a command injection vulnerability in AwindInc and OEM'ed products via SNMP. It injects a payload into the SNMP OID `1.3.6.1.4.1.3212.100.3.2.9.1.0`, which is then executed when the firmware upgrade process is triggered.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H