What’s Vulnerable › Vulnerabilities
CVE-2019-18184
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 8.2% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2019-11-27 · updated 2026-08-07
- Weakness: CWE-78
Description
Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function.
Affected products
References
- https://cyberleap.it/advisories/cve-2019-18184
- https://web.archive.org/web/20201221031912/https://www.quantumleap.it/crestron-dmc-stro-remote-root-rce/
- https://www.crestron.com/en-US/Products/Video/DigitalMedia-Modular-Matrix/Output-Cards-Blades/DMC-STRO
- https://www.quantumleap.it/crestron-dmc-stro-remote-root-rce/
- https://www.quantumleap.it/news/advisory/
- https://www.crestron.com/en-US/Products/Video/DigitalMedia-Modular-Matrix/Output-Cards-Blades/DMC-STRO
- https://www.quantumleap.it/crestron-dmc-stro-remote-root-rce/
- https://www.quantumleap.it/news/advisory/
Get alerted when CVE-2019-18184 or the next vulnerability affects your stack