CVE Catalog
CVE-2019-18184
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk8.00%
94th percentile - higher than 94% of all known CVEs
Summary
Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters in the ping function.
Risk Assessment
An attacker can gain full control of the device, potentially compromising network integrity and data.
Recommendation
Update Crestron DMC-STRO firmware to the latest available version or apply other mitigations recommended by the vendor.
Original NVD description (English source)
Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function.