There is an OS command injection vulnerability in Crestron AM-300 firmware version 1.4499.00018 which may enable a user of a limited-access SSH session to escalate their privileges to root-level access.
References
Link | Resource |
---|---|
https://www.cisa.gov/news-events/ics-advisories/icsa-24-023-02 | Third Party Advisory US Government Resource |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: icscert
Published: 2024-01-23T19:23:08.788Z
Updated: 2024-01-23T19:23:08.788Z
Reserved: 2023-12-18T15:44:37.002Z
Link: CVE-2023-6926
JSON object: View
NVD Information
Status : Analyzed
Published: 2024-01-23T20:15:45.233
Modified: 2024-01-29T20:56:34.097
Link: CVE-2023-6926
JSON object: View
Redhat Information
No data.
CWE