There is an OS command injection vulnerability in Crestron AM-300 firmware version 1.4499.00018 which may enable a user of a limited-access SSH session to escalate their privileges to root-level access.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: icscert
Published: 2024-01-23T19:23:08.788Z
Updated: 2024-08-02T08:42:08.538Z
Reserved: 2023-12-18T15:44:37.002Z
Link: CVE-2023-6926
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2024-01-23T20:15:45.233
Modified: 2024-01-29T20:56:34.097
Link: CVE-2023-6926
Redhat
No data.