CVE-2023-6926 (published 2024-01-23T19:23:08.788Z)

There is an OS command injection vulnerability in Crestron AM-300 firmware version 1.4499.00018 which may enable a user of a limited-access SSH session to escalate their privileges to root-level access.


Affected products: Vendor: Crestron
Product: AM-300
Versions:  1.4499.00018