Crestron

Records47All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical22CVSS 9.0–10.0

CVSS high17CVSS 7.0–8.9

Exploited now

Crestron records in CISA KEV

TI-2019-02935 Crestron Multiple Products Command Injection Vulnerability CRITICAL 100KEV 2022-04-15

Components

Products in the NVD configurations · select one to filter the records

Am-100 Firmware 15 records CRITICAL Am-101 Firmware 15 records CRITICAL Dm-txrx-100-str Firmware 6 records MEDIUM Airmedia Am-100 Firmware 5 records HIGH Airmedia 4 records MEDIUM Airmedia Am-101 Firmware 2 records HIGH Crestron Toolbox Protocol Firmware 2 records MEDIUM Mc3 Firmware 2 records MEDIUM

Records

5 records in Airmedia Am-100 Firmware · all components

TI-2017-12280 CVE-2017-16709 · GHSA-gq9r-3cg3-g24m

Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with…

HIGH 70

Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.73897 Published 2018-07-11 No fix listed

TI-2016-04904 CVE-2016-5640 · GHSA-hjq2-4jwm-833w

Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100…

MEDIUM 59

Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a ..

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.17707 Published 2016-08-03 No fix listed CWE-77

TI-2016-04903 CVE-2016-5639 · GHSA-rjpv-4h53-cfjp

Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100…

MEDIUM 52

Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a ..

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.20842 Published 2016-08-03 No fix listed CWE-22

TI-2019-02916 CVE-2019-3910 · GHSA-vpcf-99rm-ghcj

Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the…

MEDIUM 50

Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.08559 Published 2019-01-18 No fix listed

TI-2017-12281 CVE-2017-16710 · GHSA-87pp-9h8g-wrpq

Cross-site scripting (XSS) vulnerability in Crestron Airmedia AM-100 devices with…

LOW 23

Cross-site scripting (XSS) vulnerability in Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via uns…

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00611 Published 2018-07-11 No fix listed CWE-79

Open these records in search →

Critical	22
High	17
Medium	8
Low	0
No CVSS	0