Read the docs

Crestron

Records47All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical22CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9

Exploited now

Crestron records in CISA KEV
TI-2019-02935 Crestron Multiple Products Command Injection Vulnerability Priority CRITICAL 100KEV 2022-04-15

Components

Products in the NVD configurations · select one to filter the records
Am-100 Firmware 15 records CRITICAL Am-101 Firmware 15 records CRITICAL Dm-txrx-100-str Firmware 6 records MEDIUM Airmedia Am-100 Firmware 5 records HIGH Airmedia 4 records MEDIUM Airmedia Am-101 Firmware 2 records HIGH Crestron Toolbox Protocol Firmware 2 records MEDIUM Mc3 Firmware 2 records MEDIUM

Records

2 records in Mc3 Firmware · all components

TI-2018-07517 CVE-2018-10630 · GHSA-cwc8-6j25-gg7r

Improper access control in ICS-CERT Crestron TSW-X60 version prior to 2.001.0037.001 and…

Priority MEDIUM 55

For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001, The devices are shipped with authentication disabled, and there is no indication to users that they need to take steps to enab…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.10511 Published 2018-08-10 No fix listed CWE-284
TI-2018-09589 CVE-2018-13341 · GHSA-h2g2-jr6r-r36p

Crestron TSW-X60 all versions prior to 2.001.0037.001 and MC3 all versions prior to…

Priority MEDIUM 44

Crestron TSW-X60 all versions prior to 2.001.0037.001 and MC3 all versions prior to 1.502.0047.00, The passwords for special sudo accounts may be calculated using information accessible to those with regular user privile…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03656 Published 2018-08-10 No fix listed
Open these records in search →