Sign-up

ID

VAR-201608-0067


CVE

CVE-2016-5640


TITLE

Crestron AirMedia AM-100 contains multiple vulnerabilities

Trust: 0.8

sources: CERT/CC: VU#603047

DESCRIPTION

Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the ATE_COMMAND parameter. The Crestron AirMedia AM-100 with firmware prior to version 1.4.0.13 is vulnerable to path traversal and command injection. Supplementary information : CWE Vulnerability type by CWE-77: Improper Neutralization of Special Elements used in a Command ( Command injection ) Has been identified. http://cwe.mitre.org/data/definitions/77.htmlBy a third party .. Crestron AirMedia AM-100 is prone to a directory-traversal vulnerability and a command-injection vulnerability because it fails to sufficiently sanitize user-supplied input. Crestron AirMedia AM-100 running firmware versions 1.1.1.11 through 1.2.1 are vulnerable. Crestron AirMedia AM-100 is a smart home gateway product produced by Crestron Electronics in the United States

Trust: 2.79

sources: NVD: CVE-2016-5640 // CERT/CC: VU#603047 // JVNDB: JVNDB-2016-004126 // BID: 92216 // VULHUB: VHN-94459 // VULMON: CVE-2016-5640

AFFECTED PRODUCTS

vendor:crestronmodel:airmedia am-100scope:lteversion:1.2.1

Trust: 1.0

vendor:crestronmodel: - scope: - version: -

Trust: 0.8

vendor:crestronmodel:airmedia am-100scope: - version: -

Trust: 0.8

vendor:crestronmodel:airmedia am-100scope:ltversion:1.4.0.13

Trust: 0.8

vendor:crestronmodel:airmedia am-100scope:eqversion:1.2.1

Trust: 0.6

vendor:crestronmodel:electronics airmedia am-100scope:eqversion:1.2.1

Trust: 0.3

vendor:crestronmodel:electronics airmedia am-100scope:eqversion:1.2

Trust: 0.3

vendor:crestronmodel:electronics airmedia am-100scope:eqversion:1.1.1.11

Trust: 0.3

vendor:crestronmodel:electronics airmedia am-100scope:neversion:1.4.0.13

Trust: 0.3

sources: CERT/CC: VU#603047 // BID: 92216 // JVNDB: JVNDB-2016-004126 // CNNVD: CNNVD-201608-002 // NVD: CVE-2016-5640

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2016-5640
value: CRITICAL

Trust: 1.0

NVD: CVE-2016-5640
value: CRITICAL

Trust: 0.8

CNNVD: CNNVD-201608-002
value: CRITICAL

Trust: 0.6

VULHUB: VHN-94459
value: HIGH

Trust: 0.1

VULMON: CVE-2016-5640
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2016-5640
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-94459
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2016-5640
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.9
version: 3.0

Trust: 1.8

sources: VULHUB: VHN-94459 // VULMON: CVE-2016-5640 // JVNDB: JVNDB-2016-004126 // CNNVD: CNNVD-201608-002 // NVD: CVE-2016-5640

PROBLEMTYPE DATA

problemtype:CWE-77

Trust: 1.1

problemtype:CWE-Other

Trust: 0.8

sources: VULHUB: VHN-94459 // JVNDB: JVNDB-2016-004126 // NVD: CVE-2016-5640

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201608-002

TYPE

path traversal

Trust: 0.6

sources: CNNVD: CNNVD-201608-002

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2016-004126

PATCH
title:AirMedia Presentation Gateway AM-100url:http://www.crestron.com/products/model/AM-100
Trust: 0.8
title:Crestron AirMedia AM-100 Fixes for directory traversal vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=63403
Trust: 0.6
title:python3-Crest-Crackurl:https://github.com/XxLilBoPeepsxX/python3-Crest-Crack 
Trust: 0.1
title:CVE-2016-5640url:https://github.com/xfox64x/CVE-2016-5640 
Trust: 0.1
sources:
            
            
            VULMON: CVE-2016-5640 // 
            
            
            
            JVNDB: JVNDB-2016-004126 // 
            
            
            
            CNNVD: CNNVD-201608-002

EXTERNAL IDS
db:CERT/CCid:VU#603047
Trust: 3.7
db:NVDid:CVE-2016-5640
Trust: 2.9
db:BIDid:92216
Trust: 1.5
db:JVNid:JVNVU97169528
Trust: 0.8
db:JVNDBid:JVNDB-2016-004126
Trust: 0.8
db:CNNVDid:CNNVD-201608-002
Trust: 0.7
db:VULHUBid:VHN-94459
Trust: 0.1
db:VULMONid:CVE-2016-5640
Trust: 0.1
sources:
            
            
            CERT/CC: VU#603047 // 
            
            
            
            VULHUB: VHN-94459 // 
            
            
            
            VULMON: CVE-2016-5640 // 
            
            
            
            BID: 92216 // 
            
            
            
            JVNDB: JVNDB-2016-004126 // 
            
            
            
            CNNVD: CNNVD-201608-002 // 
            
            
            
            NVD: CVE-2016-5640

REFERENCES
url:https://github.com/cylancevulnresearch/disclosures/blob/master/clva-2016-05-002.md
Trust: 3.4
url:http://www.kb.cert.org/vuls/id/603047
Trust: 3.0
url:http://www.securityfocus.com/bid/92216
Trust: 1.2
url:http://www.crestron.com/products/model/am-100
Trust: 1.1
url:http://cwe.mitre.org/data/definitions/77.html
Trust: 0.9
url:https://github.com/cylancevulnresearch/disclosures/blob/master/clva-2016-05-001.md
Trust: 0.8
url:http://cwe.mitre.org/data/definitions/22.html
Trust: 0.8
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-5640
Trust: 0.8
url:http://jvn.jp/vu/jvnvu97169528/
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-5640
Trust: 0.8
url:https://github.com/xxlilbopeepsxx/python3-crest-crack
Trust: 0.1
url:https://github.com/xfox64x/cve-2016-5640
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
sources:
            
            
            CERT/CC: VU#603047 // 
            
            
            
            VULHUB: VHN-94459 // 
            
            
            
            VULMON: CVE-2016-5640 // 
            
            
            
            BID: 92216 // 
            
            
            
            JVNDB: JVNDB-2016-004126 // 
            
            
            
            CNNVD: CNNVD-201608-002 // 
            
            
            
            NVD: CVE-2016-5640

CREDITS
Zach Lanier of Cylance, Inc.
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-201608-002

SOURCES
db:CERT/CCid:VU#603047
db:VULHUBid:VHN-94459
db:VULMONid:CVE-2016-5640
db:BIDid:92216
db:JVNDBid:JVNDB-2016-004126
db:CNNVDid:CNNVD-201608-002
db:NVDid:CVE-2016-5640

LAST UPDATE DATE
2025-04-13T23:22:20.664000+00:00

SOURCES UPDATE DATE
db:CERT/CCid:VU#603047date:2016-08-02T00:00:00
db:VULHUBid:VHN-94459date:2016-08-15T00:00:00
db:VULMONid:CVE-2016-5640date:2016-08-15T00:00:00
db:BIDid:92216date:2016-08-01T00:00:00
db:JVNDBid:JVNDB-2016-004126date:2016-08-04T00:00:00
db:CNNVDid:CNNVD-201608-002date:2016-08-08T00:00:00
db:NVDid:CVE-2016-5640date:2025-04-12T10:46:40.837

SOURCES RELEASE DATE
db:CERT/CCid:VU#603047date:2016-08-01T00:00:00
db:VULHUBid:VHN-94459date:2016-08-03T00:00:00
db:VULMONid:CVE-2016-5640date:2016-08-03T00:00:00
db:BIDid:92216date:2016-08-01T00:00:00
db:JVNDBid:JVNDB-2016-004126date:2016-08-04T00:00:00
db:CNNVDid:CNNVD-201608-002date:2016-08-04T00:00:00
db:NVDid:CVE-2016-5640date:2016-08-03T01:59:02.520