CVE:CVE-2018-5553
CNNVD:CNNVD-201807-939
Crestron Electronics DGE-100、DM-DGE-200-C和TS-1542-C devices都是美国Crestron Electronics公司的数字图形引擎产品。
使用1.3384.00049.001及之前版本固件的Crestron Electronics DGE-100、DM-DGE-200-C和TS-1542-C（带有默认配置）设备上的Crestron Console服务存在命令注入漏洞。攻击者可利用该漏洞获取root权限。
solution:Upgrade crestron dge-100_firmware to a higher version than 1.3384.00049.001,and avoid the version (,1.3384.00049.001]; Upgrade crestron dm-dge-200-c_firmware to a higher version than 1.3384.00049.001,and avoid the version (,1.3384.00049.001]; Upgrade crestron ts-1542-c_firmware to a higher version than 1.3384.00049.001,and avoid the version (,1.3384.00049.001]