CVE-2017-16709

HIGH

Crestron Airmedia <1.6.0, <2.7.0 - RCE

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2017-16709. PoCs published by Metasploit, including Metasploit module exploits/linux/snmp/awind_snmp_exec.

AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in AwindInc and OEM'ed products via SNMP. It injects a payload into the SNMP OID `1.3.6.1.4.1.3212.100.3.2.9.1.0`, which is then executed by triggering a firmware upgrade process.

Description

Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotelinux
https://www.exploit-db.com/exploits/47353

This Metasploit module exploits a command injection vulnerability in AwindInc and OEM'ed products via SNMP. It injects a payload into the SNMP OID `1.3.6.1.4.1.3212.100.3.2.9.1.0`, which is then executed by triggering a firmware upgrade process.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: AwindInc SNMP Service (Crestron Airmedia AM-100/AM-101, Awind WiPG-1600w/2000d, Barco wePresent 2000, Newline Trucast 2/3)
Auth required
Prerequisites: SNMP read-write community string · Network access to SNMP service
devstral-2 · analyzed Feb 16, 2026 Full analysis →
metasploit WORKING POC EXCELLENT
rubypocunix
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/snmp/awind_snmp_exec.rb

This Metasploit module exploits a command injection vulnerability in AwindInc and OEM'ed products via SNMP. It injects a payload into the SNMP OID `1.3.6.1.4.1.3212.100.3.2.9.1.0`, which is then executed when the firmware upgrade process is triggered.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: AwindInc SNMP Service (Crestron Airmedia AM-100/101, Awind WiPG-1600w/2000d, Barco wePresent 2000, Newline Trucast 2/3)
Auth required
Prerequisites: SNMP read-write community string · Network access to the target device
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Scores

CVSS v3 7.2
EPSS 0.8197
EPSS Percentile 99.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (2)
crestron/airmedia_am-100_firmware < 1.6.0
crestron/airmedia_am-101_firmware < 2.7.0
Published Jul 11, 2018
Tracked Since Feb 18, 2026