Threat intelligence / Vulnerability
CVE-2019-3929
Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.
Vulnerability
TypeVulnerability
External ID—
First seen2022-04-15
Last seen2022-04-15
Confidence
—
Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.
Labels
CISA KEV context
Vendor / productCrestron Multiple Products
Added2022-04-15
Due date2022-05-06
7 recorded
Relationships
2 external