CVE-2019-18184
CRITICALCrestron DMC-STRO 1.0 - Remote Command Execution via Ping Function
Title source: llmDescription
Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function.
References (3)
Core 3
Core References
Third Party Advisory x_refsource_misc
https://www.quantumleap.it/news/advisory/
Product x_refsource_misc
https://www.crestron.com/en-US/Products/Video/DigitalMedia-Modular-Matrix/Output-Cards-Blades/DMC-STRO
Exploit, Third Party Advisory x_refsource_misc
https://www.quantumleap.it/crestron-dmc-stro-remote-root-rce/
Scores
CVSS v3
9.8
EPSS
0.0800
EPSS Percentile
94.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-78
Status
published
Products (1)
crestron/dmc-stro_firmware
1.0
Published
Nov 27, 2019
Tracked Since
Feb 18, 2026