CVE:CVE-2017-16710
CNNVD:CNNVD-201807-1105
Crestron AirMedia AM-100和AM-101都是美国Crestron Electronics公司的网关产品。
使用1.6.0之前版本固件的Crestron Airmedia AM-100和使用2.7.0之前版本固件的AM-101中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意的Web脚本或HTML。
solution:Upgrade crestron airmedia_am-100_firmware to a higher version than 1.6.0,and avoid the version (,1.6.0); Upgrade crestron airmedia_am-101_firmware to a higher version than 2.7.0,and avoid the version (,2.7.0)