{"affected":[{"affectedData":[{"product":"DGE-100","vendor":"Crestron","versions":[{"lessThanOrEqual":"1.3384.00049.001","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"TS-1542-C","vendor":"Crestron","versions":[{"lessThanOrEqual":"1.3384.00049.001","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"DM-DGE-200-C","vendor":"Crestron","versions":[{"lessThanOrEqual":"1.3384.00049.001","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"cve@rapid7.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:crestron:dge-100_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"2F48676D-D566-45C5-965B-B20ED8F2817F","versionEndIncluding":"1.3384.00049.001","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:crestron:dge-100:-:*:*:*:*:*:*:*","matchCriteriaId":"E5D6A6E8-4FF6-467F-8F59-5512DD5B0A2C","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:crestron:dm-dge-200-c_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"9D0D4D4C-9AE5-4500-8531-691E766A3175","versionEndIncluding":"1.3384.00049.001","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:crestron:dm-dge-200-c:-:*:*:*:*:*:*:*","matchCriteriaId":"D0D4FFAC-0D1F-4D58-986B-3F402EE643AE","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:crestron:ts-1542-c_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"8D4AA22E-4175-4B81-BC75-B88868785FD5","versionEndIncluding":"1.3384.00049.001","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:crestron:ts-1542-c:-:*:*:*:*:*:*:*","matchCriteriaId":"B59A47EB-692A-47A0-B1CE-6967A18B7A37","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Crestron Console service running on DGE-100, DM-DGE-200-C, and TS-1542-C devices with default configuration and running firmware versions 1.3384.00049.001 and lower are vulnerable to command injection that can be used to gain root-level access."},{"lang":"es","value":"El servicio Crestron Console en los dispositivos DGE-100, DM-DGE-200-C y TS-1542-C con la configuración por defecto y ejecutando versiones del firmware 1.3384.00049.001 y anteriores es vulnerable a una inyección de comandos que puede emplearse para obtener acceso a nivel root."}],"id":"CVE-2018-5553","lastModified":"2026-06-17T02:00:31.220","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":10.0,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":10.0,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"cve@rapid7.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-07-10T16:29:00.970","references":[{"source":"cve@rapid7.com","tags":["Third Party Advisory"],"url":"https://blog.rapid7.com/2018/06/12/r7-2018-15-cve-2018-5553-crestron-dge-100-console-command-injection-fixed/"},{"source":"cve@rapid7.com","tags":["Vendor Advisory"],"url":"https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet#CVE%C2%AD-2018%C2%AD-5553"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://blog.rapid7.com/2018/06/12/r7-2018-15-cve-2018-5553-crestron-dge-100-console-command-injection-fixed/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet#CVE%C2%AD-2018%C2%AD-5553"}],"sourceIdentifier":"cve@rapid7.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"cve@rapid7.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-78"}],"source":"nvd@nist.gov","type":"Primary"}]}