PT-2016-6611 · Crestron · Crestron Airmedia Am-100

Benichmt1 + 1 · Published 2016-08-03 · Updated 2017-09-03 · CVE-2016-5639

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Crestron AirMedia AM-100 versions prior to 1.4.0.13

Description A directory traversal issue exists in the cgi-bin/login.cgi file, allowing remote attackers to read arbitrary files by including a .. (dot dot) in the src parameter of the affected API endpoint.

Recommendations For versions prior to 1.4.0.13, update the firmware to version 1.4.0.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the cgi-bin/login.cgi file until the update is applied. Avoid using the src parameter in the vulnerable endpoint until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2016-5639

Affected Products

Crestron Airmedia Am-100

References · 6

• 🔥 https://exploit-db.com/exploits/40813 · Exploit
• https://osv.dev/vulnerability/CVE-2016-5639 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5639 · Security Note
• https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2016-05-001.md · Note
• http://securityfocus.com/bid/92216 · Note
• http://kb.cert.org/vuls/id/603047 · Note