CVE-2018-5553
Crestron DGE-100 Console Command Injection (FIXED)
The Crestron Console service running on DGE-100, DM-DGE-200-C, and TS-1542-C devices with default configuration and running firmware versions 1.3384.00049.001 and lower are vulnerable to command injection that can be used to gain root-level access.
CVSS 3.0 · 9.8 Critical
EPSS 2.5%
KEV · Not listed
Vendors
Products