Crestron 1

Organization

CVE-2019-3929: Crestron Multiple Products Command Injection Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Apr 15, 2022

Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.

Vulnerabilities & Patching