Description
The Crestron Console service running on DGE-100, DM-DGE-200-C, and TS-1542-C devices with default configuration and running firmware versions 1.3384.00049.001 and lower are vulnerable to command injection that can be used to gain root-level access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Crestron | DGE-100 | unspecified – ≤ 1.3384.00049.001 | — |
| Crestron | TS-1542-C | unspecified – ≤ 1.3384.00049.001 | — |
| Crestron | DM-DGE-200-C | unspecified – ≤ 1.3384.00049.001 | — |