CVE-2017-16709

CVE-2017-16709 describes a critical remote code execution vulnerability affecting Crestron Airmedia AM-100 devices with firmware prior to 1.6.0 and AM-101 devices with firmware prior to 2.7.0. This flaw allows remote authenticated administrators to execute arbitrary code through unspecified vectors, posing a significant risk to affected systems. The vulnerability carries a high CVSS score of 7.2, indicating a severe impact with high confidentiality, integrity, and availability compromise. Exploitation is straightforward, requiring only network access and high privileges, but does not involve user interaction. While not listed on the KEV catalog or Hot List, a Metasploit module (AwindInc SNMP Service Command Injection) is publicly available, demonstrating exploitability. Despite this, there is no recorded community discussion or media coverage, suggesting limited public awareness or active exploitation in the wild.