CVE-2018-5553 – Crestron DGE-100 Console Command Injection (FIXED)

https://notcve.org/view.php?id=CVE-2018-5553

10 Jul 2018 — The Crestron Console service running on DGE-100, DM-DGE-200-C, and TS-1542-C devices with default configuration and running firmware versions 1.3384.00049.001 and lower are vulnerable to command injection that can be used to gain root-level access. El servicio Crestron Console en los dispositivos DGE-100, DM-DGE-200-C y TS-1542-C con la configuración por defecto y ejecutando versiones del firmware 1.3384.00049.001 y anteriores es vulnerable a una inyección de comandos que puede emplearse para obtener acceso... • https://blog.rapid7.com/2018/06/12/r7-2018-15-cve-2018-5553-crestron-dge-100-console-command-injection-fixed • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •