CVE-2025-47421
Gravedad CVSS v4.0:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
03/09/2025
Última modificación:
04/09/2025
Descripción
*** Pendiente de traducción *** Improper Neutralization of Argument Delimiters in a Command (&#39;Argument Injection&#39;) vulnerability in CRESTRON TOUCHSCREENS x70 allows Argument Injection.This issue affects TOUCHSCREENS x70: from 3.001.0031.001 through 3.001.0034.001.<br />
<br />
A specially crafted SCP command sent via SSH login string can lead a valid administrator user to gain Privileged Operating System access on the device.<br />
<br />
<br />
Following Products Models are affected:<br />
<br />
TSW-x70 <br />
TSW-x60 <br />
TST-1080<br />
AM-3000/3100/3200<br />
Soundbar VB70<br />
HD-PS622/621/402<br />
HD-TXU-RXU-4kZ-211<br />
HD-MDNXM-4KZ-E<br />
<br />
*Note: additional firmware updates will be published once made available
Impacto
Puntuación base 4.0
8.60
Gravedad 4.0
ALTA