CVE-2019-18184 - Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function

CRITICAL

Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function

Published Nov 27, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 8.15%

Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function.

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

Link	Providers	Tags
https://cyberleap.it/advisories/cve-2019-18184
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7989		Advisory
https://web.archive.org/web/20201221031912/https://www.quantumleap.it/crestron-dmc-stro-remote-root-rce/
https://www.crestron.com/en-US/Products/Video/DigitalMedia-Modular-Matrix/Output-Cards-Blades/DMC-STRO		Product
https://www.quantumleap.it/crestron-dmc-stro-remote-root-rce/		ExploitThird Party Advisory
https://www.quantumleap.it/news/advisory/		Third Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 27, 2019

Updated Aug 7, 2026

Reserved Oct 17, 2019

CISA Vulnrichment

No data

NVD

Status Modified

Modified Aug 7, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 27, 2019

Updated Aug 7, 2026

GitHub

No data