CVE-2022-40298

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell.
Configurations

Configuration 1 (hide)

cpe:2.3:a:crestron:airmedia:4.3.1.39:*:*:*:*:windows:*:*

History

24 Sep 2022, 02:03

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8
CPE cpe:2.3:a:crestron:airmedia:4.3.1.39:*:*:*:*:windows:*:*
First Time Crestron
Crestron airmedia
References (MISC) https://www.crestron.com/Security/Security_Advisories - (MISC) https://www.crestron.com/Security/Security_Advisories - Vendor Advisory
References (MISC) https://www.crestron.com/release_notes/airmedia_windows_installer_release_notes_5.5.1.84.pdf - (MISC) https://www.crestron.com/release_notes/airmedia_windows_installer_release_notes_5.5.1.84.pdf - Release Notes, Vendor Advisory
CWE NVD-CWE-noinfo

23 Sep 2022, 04:21

Type Values Removed Values Added
New CVE

Information

Published : 2022-09-23 00:15

Updated : 2022-09-24 02:03


NVD link : CVE-2022-40298

Mitre link : CVE-2022-40298


JSON object : View

Products Affected

crestron

  • airmedia