CVE-2025-47421

N/A

Description

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in CRESTRON TOUCHSCREENS x70 allows Argument Injection.This issue affects TOUCHSCREENS x70: from 3.001.0031.001 through 3.001.0034.001. A specially crafted SCP command sent via SSH login string can lead a valid administrator user to gain Privileged Operating System access on the device. Following Products Models are affected: TSW-x70 TSW-x60 TST-1080 AM-3000/3100/3200 Soundbar VB70 HD-PS622/621/402 HD-TXU-RXU-4kZ-211 HD-MDNXM-4KZ-E *Note: additional firmware updates will be published once made available

Details CVE

Score CVSS v3.1N/A

Publie9/3/2025

Derniere modification9/4/2025

Sourcenvd

Observations honeypot0

Faiblesses (CWE)

CWE-88

References

https://https://www.crestron.com/Software-Firmware/Firmware/Touchpanels/TS-770-TS-1070-TSS-770-TSS-1070-TSW-570/3-002-0040-001(25b0b659-c4b4-483f-aecb-067757d23ef3)

https://https://www.crestron.com/release_notes/tsw-xx70_3.002.0040.001_release_notes.pdf(25b0b659-c4b4-483f-aecb-067757d23ef3)

https://security.crestron.com(25b0b659-c4b4-483f-aecb-067757d23ef3)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.