Crestron

Records47All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical22CVSS 9.0–10.0

CVSS high17CVSS 7.0–8.9

Exploited now

Crestron records in CISA KEV

TI-2019-02935 Crestron Multiple Products Command Injection Vulnerability CRITICAL 100KEV 2022-04-15

Components

Products in the NVD configurations · select one to filter the records

Am-100 Firmware 15 records CRITICAL Am-101 Firmware 15 records CRITICAL Dm-txrx-100-str Firmware 6 records MEDIUM Airmedia Am-100 Firmware 5 records HIGH Airmedia 4 records MEDIUM Airmedia Am-101 Firmware 2 records HIGH Crestron Toolbox Protocol Firmware 2 records MEDIUM Mc3 Firmware 2 records MEDIUM

Records

2 records in Crestron Toolbox Protocol Firmware · all components

TI-2018-07990 CVE-2018-11228 · GHSA-w4cc-fhfh-rgg3

Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices…

MEDIUM 52

Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via a Bash shell service in Crestron Toolbox Protocol (CTP).

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.07386 Published 2018-06-08 No fix listed CWE-94

TI-2018-07991 CVE-2018-11229 · GHSA-j4hf-37q6-2qwf

Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices…

MEDIUM 51

Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via command injection in Crestron Toolbox Protocol (CTP).

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05562 Published 2018-06-08 No fix listed CWE-78

Open these records in search →

Critical	22
High	17
Medium	8
Low	0
No CVSS	0