CVE-2022-40298

Vulnerability

Crestron AirMedia for Windows versions before 5.5.1.84, including version 4.3.1.39, contain insecure inherited permissions. This flaw allows a low-privileged user to exploit the repair functionality of the application to gain elevated access. The vulnerability is present in the AirMedia Windows Application and is triggered during a system repair operation [1].

Exploitation

An attacker with low-privileged access to the system can initiate a repair of the AirMedia Windows Application. The repair process runs with elevated privileges, and due to the insecure inherited permissions, the attacker can leverage this to execute arbitrary commands in the context of the repair process. No additional authentication or user interaction beyond initiating the repair is required [1].

Impact

Successful exploitation allows the attacker to obtain a SYSTEM-level shell, resulting in complete compromise of the affected Windows system. The attacker gains full control over the operating system, including the ability to install programs, modify data, and create new accounts with full user rights [1].

Mitigation

Crestron has addressed this vulnerability in AirMedia for Windows version 5.5.1.84 and later. Users should update to the latest version available from the Crestron support website. No workaround is documented; updating is the recommended mitigation [1].