Crestron Touch Panels ConsoleFindCommandMatchList Vulnerability Allowing Unauthorized File Execution

A vulnerability in the ConsoleFindCommandMatchList function of libsymproc.so, imported by ctpd, has been identified in certain Crestron touch panels. This vulnerability may allow unauthorized execution of a file defined by an attacker, based on how the ConsoleFindCommandMatchList prioritizes file enumeration. The affected touch panels include the TSW-760 and TSW-1060 models, running firmware versions 3.002.1061, 3.000.0110.001, and earlier versions of 3.000.0110.001 for the x70 series.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of files, potentially allowing attackers to execute malicious commands or scripts on the affected device.