Remote Code Execution in Crestron AirMedia AM-100/AM-101

This repository contains a single Metasploit module (modules/exploits/linux/snmp/awind_snmp_exec.rb) that exploits a command injection vulnerability (CVE-2017-16709) in AwindInc and various OEM devices (including Crestron Airmedia, Barco wePresent, and Newline Trucast series). The exploit leverages SNMP write access to inject a malicious command into a device configuration parameter (camFWUpgradeFTPURL) via a specific SNMP OID. The injected command is then executed by triggering a firmware update process, allowing the attacker to execute arbitrary commands or deploy a staged payload (such as a reverse shell) on the target device. The exploit requires a valid SNMP read-write community string (default: 'private') and network access to the device's SNMP service. The module supports both direct command execution and staged payload delivery, and includes logic to prevent the device from rebooting and losing the attacker's shell. The code is written in Ruby and is structured as a standard Metasploit exploit module, with clear separation of check, payload injection, and trigger logic. Several SNMP OIDs and file paths are fingerprintable, and the exploit is operational and ready for use within the Metasploit framework.