TI-2025-29924 Aliases CVE-2025-47416 GHSA-7fcq-fm2j-q226

ConsoleFindCommandMatchList

LOW 27CWE-697Published 2025-09-09 · Updated 2025-09-09

Key facts

Attack vector: Network
Privileges required: High
User interaction: None
Attack complexity: High
Attack requirements: None
Impact type: —
Confidentiality · integrity · availability: None · High · None
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A vulnerability exists in the ConsoleFindCommandMatchList function in libsymproc. so imported by ctpd that may lead to unauthorized execution of an attacker-defined file that gets prioritized by the ConsoleFindCommandMatchList. A third-party researcher discovered that the ConsoleFindCommandMatchList enumerates the /dev/shm/symproc/c directory in alphabetical order to identify console commands. Permission levels are inferred from the integer values present in each command's file name. Confirmed Affected Hardware: TSW-760, TSW-1060 Confirmed Affected Firmware: 3.002.1061 Fixed Firmware: no fixed released (product is discontinued and end of life) For x70  The Affected Firmware:- 3.000.0110.001  and versions below The Fixed Firmware:- 3.001.0031.001

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.0037 31st percentileScored 2026-11-07

Fix Fixed TOUCHSCREEN x70 (CRESTRON): 3.001.0031.001

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Crestron	TOUCHSCREEN x70	3.000.0110.001 to before 3.001.0031.001	3.001.0031.001	Patch available	CNA
Crestron	Touchscreen x60s	3.002.1061	—	No fix listed	CNA

TOUCHSCREEN x70 VendorCrestron Affected 3.000.0110.001 to before 3.001.0031.001 Fixed in 3.001.0031.001 Patch available CNA
Touchscreen x60s VendorCrestron Affected 3.002.1061 Fixed in — No fix listed CNA

Remediation

Fix · CNA TOUCHSCREEN x70 (CRESTRON) Fixed in 3.001.0031.001

Timeline

2026-10-02 Threatist record created from CVE-2025-47416
2026-10-03 Alias added: GHSA-7fcq-fm2j-q226

References

Patch 1

https://www.crestron.com/Software-Firmware/Firmware/Touchpanels/TS-770-TS-1070-TSS-770-TSS-1070-TSW-570/3-002-0040-001

Advisory 1

https://security.crestron.com

TI-2019-02935 Cross-site scripting in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT… KEVCVSS 3.1CRITICAL 9.8
TI-2022-07331 An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. CVSS 3.1CRITICAL 9.8
TI-2017-12280 Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with… CVSS 3.0HIGH 7.2
TI-2019-02938 Hard-coded credentials in Crestron AirMedia CVSS 3.1CRITICAL 9.8
TI-2016-04904 Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100… CVSS 3.0CRITICAL 9.8
TI-2025-29925 Enable Debug Images CVSS 4.0MEDIUM 5.1

See all 46 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences