Improper access control in Crestron AirMedia
Priority MEDIUM 46CWE-284Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-284.
Summary
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 anyone can change the administrator and moderator passwords via the iso.3.6.1.4.1.3212.100.3.2.8.1 and iso.3.6.1.4.1.3212.100.3.2.8.2 OIDs. A remote, unauthenticated attacker can use this vulnerability to change the admin or moderator user's password and gain access to restricted areas on the HTTP interface.
Why it matters now
EPSS 0.02167 82nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Crestron | Crestron AirMedia | AM-100 firmware 1.6.0.2 and AM-101 firmware 2.7.0.2 | — | No fix listed | CNA |
- Crestron AirMedia VendorCrestron Affected AM-100 firmware 1.6.0.2 and AM-101 firmware 2.7.0.2 Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:crestron:am-100_firmware:1.6.0.2:*:*:*:*:*:*:* | 1.6.0.2 | Vulnerable | Crestron |
| cpe:2.3:h:crestron:am-100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Crestron |
| cpe:2.3:o:crestron:am-101_firmware:2.7.0.2:*:*:*:*:*:*:* | 2.7.0.2 | Vulnerable | Crestron |
| cpe:2.3:h:crestron:am-101:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Crestron |
- cpe:2.3:o:crestron:am-100_firmware:1.6.0.2:*:*:*:*:*:*:* Versions 1.6.0.2 Vulnerable ·Crestron
- cpe:2.3:h:crestron:am-100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Crestron
- cpe:2.3:o:crestron:am-101_firmware:2.7.0.2:*:*:*:*:*:*:* Versions 2.7.0.2 Vulnerable ·Crestron
- cpe:2.3:h:crestron:am-101:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Crestron
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-3927
- 2026-10-03 Alias added: GHSA-8926-mj52-jxcv
References
More Crestron Am-100 Firmware vulnerabilities
- TI-2019-02935 Cross-site scripting in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT… KEVCVSS 3.1CRITICAL 9.8
- TI-2019-02938 Hard-coded credentials in Crestron AirMedia CVSS 3.1CRITICAL 9.8
- TI-2019-02936 Stack-based buffer overflow in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq… CVSS 3.1CRITICAL 9.8
- TI-2019-02932 Cross-site scripting in Crestron AirMedia CVSS 3.1CRITICAL 9.8
- TI-2019-02931 Cross-site scripting in Crestron AirMedia CVSS 3.1CRITICAL 9.8
- TI-2019-02945 Hard-coded credentials in Crestron AirMedia CVSS 3.1CRITICAL 9.8
Sources
- CVE-2019-3927 · CVE Program
- CVE-2019-3927 · NVD
- FIRST EPSS
- GHSA-8926-mj52-jxcv · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences