CVE:CVE-2019-3929
CNNVD:CNNVD-201904-1386
多款路由器中存在命令操作系统命令注入漏洞。该漏洞源于外部输入数据构造可执行命令过程中，网络系统或产品未正确过滤其中的特殊元素。攻击者可利用该漏洞执行非法命令。以下产品及版本受到影响：使用1.6.0.2版本固件的Crestron AM-100；使用2.7.0.1版本固件的Crestron AM-101；使用2.3.0.10版本固件的Barco wePresent WiPG-1000P；使用2.4.1.19之前版本固件的Barco wePresent WiPG-1600W；使用2.0.3.4版本固件的Extron ShareLink 200/250；使用1.1.0.7版本固件的Teq AV IT WIPS710；使用1.4.2.3版本固件的SHARP PN-L703WA，使用1.0.0.5版本固件的Optoma WPS-Pro，使用1.0.0.5版本固件的Blackbox HD WPS；使用1.0.16版本固件的InFocus LiteShow3；使用2.0.0.7版本固件的InFocus LiteShow4。
solution:Upgrade crestron am-100_firmware to a higher version than 1.6.0.2,and avoid the version 1.6.0.2; Upgrade crestron am-101_firmware to a higher version than 2.7.0.2,and avoid the version 2.7.0.2; Upgrade barco wepresent_wipg-1000p_firmware to a higher version than 2.3.0.10,and avoid the version 2.3.0.10; Upgrade barco wepresent_wipg-1600w_firmware to a higher version than 2.4.1.19,and avoid the version (,2.4.1.19); Upgrade extron sharelink_200_firmware to a higher version than 2.0.3.4,and avoid the version 2.0.3.4; Upgrade extron sharelink_250_firmware to a higher version than 2.0.3.4,and avoid the version 2.0.3.4; Upgrade teqavit wips710_firmware to a higher version than 1.1.0.7,and avoid the version 1.1.0.7; Upgrade sharp pn-l703wa_firmware to a higher version than 1.4.2.3,and avoid the version 1.4.2.3; Upgrade optoma wps-pro_firmware to a higher version than 1.0.0.5,and avoid the version 1.0.0.5; Upgrade blackbox hd_wireless_presentation_system_firmware to a higher version than 1.0.0.5,and avoid the version 1.0.0.5; Upgrade infocus liteshow3_firmware to a higher version than 1.0.16,and avoid the version 1.0.16; Upgrade infocus liteshow4_firmware to a higher version than 2.0.0.7,and avoid the version 2.0.0.7