Vulnerabilities > Crestron > AM 300 Firmware

DATE CVE VULNERABILITY TITLE RISK
2024-01-23 CVE-2023-6926 OS Command Injection vulnerability in Crestron Am-300 Firmware 1.4499.00018
There is an OS command injection vulnerability in Crestron AM-300 firmware version 1.4499.00018 which may enable a user of a limited-access SSH session to escalate their privileges to root-level access.
local
low complexity
crestron CWE-78
7.8