CVE Catalog
CVE-2016-5640
CriticalSummary
Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the ATE_COMMAND parameter.
Risk Assessment
An attacker can remotely access the system and execute unauthorized commands, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to update the firmware to version 1.4.0.13 or later to mitigate this vulnerability.
Original NVD description (English source)
Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the ATE_COMMAND parameter.