Read the docs
TI-2019-02935 Aliases CVE-2019-3929GHSA-m297-v8rg-x5fh

Cross-site scripting in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT…

Priority CRITICAL 100Exploited in the wildCWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Cross-site scripting, Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-79 and CWE-78.

Summary

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.

Why it matters now

Exploitation Active In CISA KEV since 2022-04-15CISA due date 2022-05-06
EPSS 0.98952 99th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD and the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CrestronCrestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4.Crestron AM-100 firmware 1.6.0.2; Crestron AM-101 firmware 2.7.0.1; Barco wePresent WiPG-1000P firmware 2.3.0.10; Barco wePresent WiPG-1600W before firmware 2.4.1.19; Extron ShareLink 200/250 firmware 2.0.3.4; Teq AV IT WIPS710 firmware 1.1.0.7; SHARP PN-L703WA firmware 1.4.2.3; Optoma WPS-Pro firmware 1.0.0.5; Blackbox HD WPS firmware 1.0.0.5; InFocus LiteShow3 firmware 1.0.16; and InFocus LiteShow4 2.0.0.7—No fix listedCNA
  • Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4. VendorCrestron Affected Crestron AM-100 firmware 1.6.0.2; Crestron AM-101 firmware 2.7.0.1; Barco wePresent WiPG-1000P firmware 2.3.0.10; Barco wePresent WiPG-1600W before firmware 2.4.1.19; Extron ShareLink 200/250 firmware 2.0.3.4; Teq AV IT WIPS710 firmware 1.1.0.7; SHARP PN-L703WA firmware 1.4.2.3; Optoma WPS-Pro firmware 1.0.0.5; Blackbox HD WPS firmware 1.0.0.5; InFocus LiteShow3 firmware 1.0.16; and InFocus LiteShow4 2.0.0.7 Fixed in — No fix listed CNA

CPE configurations NVD · 24

CPEVersionsRoleVendor
cpe:2.3:o:crestron:am-100_firmware:1.6.0.2:*:*:*:*:*:*:*1.6.0.2VulnerableCrestron
cpe:2.3:h:crestron:am-100:-:*:*:*:*:*:*:*not specified by NVDRunning onCrestron
cpe:2.3:o:crestron:am-101_firmware:2.7.0.2:*:*:*:*:*:*:*2.7.0.2VulnerableCrestron
cpe:2.3:h:crestron:am-101:-:*:*:*:*:*:*:*not specified by NVDRunning onCrestron
cpe:2.3:o:barco:wepresent_wipg-1000p_firmware:2.3.0.10:*:*:*:*:*:*:*2.3.0.10VulnerableBarco
cpe:2.3:h:barco:wepresent_wipg-1000p:-:*:*:*:*:*:*:*not specified by NVDRunning onBarco
cpe:2.3:o:barco:wepresent_wipg-1600w_firmware:*:*:*:*:*:*:*:*before 2.4.1.19VulnerableBarco
cpe:2.3:h:barco:wepresent_wipg-1600w:-:*:*:*:*:*:*:*not specified by NVDRunning onBarco
cpe:2.3:o:extron:sharelink_200_firmware:2.0.3.4:*:*:*:*:*:*:*2.0.3.4VulnerableExtron
cpe:2.3:h:extron:sharelink_200:-:*:*:*:*:*:*:*not specified by NVDRunning onExtron
  • cpe:2.3:o:crestron:am-100_firmware:1.6.0.2:*:*:*:*:*:*:* Versions 1.6.0.2 Vulnerable ·Crestron
  • cpe:2.3:h:crestron:am-100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Crestron
  • cpe:2.3:o:crestron:am-101_firmware:2.7.0.2:*:*:*:*:*:*:* Versions 2.7.0.2 Vulnerable ·Crestron
  • cpe:2.3:h:crestron:am-101:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Crestron
  • cpe:2.3:o:barco:wepresent_wipg-1000p_firmware:2.3.0.10:*:*:*:*:*:*:* Versions 2.3.0.10 Vulnerable ·Barco
  • cpe:2.3:h:barco:wepresent_wipg-1000p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Barco
  • cpe:2.3:o:barco:wepresent_wipg-1600w_firmware:*:*:*:*:*:*:*:* Versions before 2.4.1.19 Vulnerable ·Barco
  • cpe:2.3:h:barco:wepresent_wipg-1600w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Barco
  • cpe:2.3:o:extron:sharelink_200_firmware:2.0.3.4:*:*:*:*:*:*:* Versions 2.0.3.4 Vulnerable ·Extron
  • cpe:2.3:h:extron:sharelink_200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Extron
Show 14 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:extron:sharelink_250_firmware:2.0.3.4:*:*:*:*:*:*:*2.0.3.4VulnerableExtron
cpe:2.3:h:extron:sharelink_250:-:*:*:*:*:*:*:*not specified by NVDRunning onExtron
cpe:2.3:o:teqavit:wips710_firmware:1.1.0.7:*:*:*:*:*:*:*1.1.0.7VulnerableTeqavit
cpe:2.3:h:teqavit:wips710:-:*:*:*:*:*:*:*not specified by NVDRunning onTeqavit
cpe:2.3:o:sharp:pn-l703wa_firmware:1.4.2.3:*:*:*:*:*:*:*1.4.2.3VulnerableSharp Corporation
cpe:2.3:h:sharp:pn-l703wa:-:*:*:*:*:*:*:*not specified by NVDRunning onSharp Corporation
cpe:2.3:o:optoma:wps-pro_firmware:1.0.0.5:*:*:*:*:*:*:*1.0.0.5VulnerableOptoma
cpe:2.3:h:optoma:wps-pro:-:*:*:*:*:*:*:*not specified by NVDRunning onOptoma
cpe:2.3:o:blackbox:hd_wireless_presentation_system_firmware:1.0.0.5:*:*:*:*:*:*:*1.0.0.5VulnerableBlack Box
cpe:2.3:h:blackbox:hd_wireless_presentation_system:-:*:*:*:*:*:*:*not specified by NVDRunning onBlack Box
cpe:2.3:o:infocus:liteshow3_firmware:1.0.16:*:*:*:*:*:*:*1.0.16VulnerableInfocus
cpe:2.3:h:infocus:liteshow3:-:*:*:*:*:*:*:*not specified by NVDRunning onInfocus
cpe:2.3:o:infocus:liteshow4_firmware:2.0.0.7:*:*:*:*:*:*:*2.0.0.7VulnerableInfocus
cpe:2.3:h:infocus:liteshow4:-:*:*:*:*:*:*:*not specified by NVDRunning onInfocus
  • cpe:2.3:o:extron:sharelink_250_firmware:2.0.3.4:*:*:*:*:*:*:* Versions 2.0.3.4 Vulnerable ·Extron
  • cpe:2.3:h:extron:sharelink_250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Extron
  • cpe:2.3:o:teqavit:wips710_firmware:1.1.0.7:*:*:*:*:*:*:* Versions 1.1.0.7 Vulnerable ·Teqavit
  • cpe:2.3:h:teqavit:wips710:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Teqavit
  • cpe:2.3:o:sharp:pn-l703wa_firmware:1.4.2.3:*:*:*:*:*:*:* Versions 1.4.2.3 Vulnerable ·Sharp Corporation
  • cpe:2.3:h:sharp:pn-l703wa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Sharp Corporation
  • cpe:2.3:o:optoma:wps-pro_firmware:1.0.0.5:*:*:*:*:*:*:* Versions 1.0.0.5 Vulnerable ·Optoma
  • cpe:2.3:h:optoma:wps-pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Optoma
  • cpe:2.3:o:blackbox:hd_wireless_presentation_system_firmware:1.0.0.5:*:*:*:*:*:*:* Versions 1.0.0.5 Vulnerable ·Black Box
  • cpe:2.3:h:blackbox:hd_wireless_presentation_system:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Black Box
  • cpe:2.3:o:infocus:liteshow3_firmware:1.0.16:*:*:*:*:*:*:* Versions 1.0.16 Vulnerable ·Infocus
  • cpe:2.3:h:infocus:liteshow3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Infocus
  • cpe:2.3:o:infocus:liteshow4_firmware:2.0.0.7:*:*:*:*:*:*:* Versions 2.0.0.7 Vulnerable ·Infocus
  • cpe:2.3:h:infocus:liteshow4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Infocus

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2022-04-15 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2019-3929
  3. 2026-10-03 Alias added: GHSA-m297-v8rg-x5fh

References

Exploit 2

Advisory 2

  • TI-2019-02938 Hard-coded credentials in Crestron AirMedia CVSS 3.1CRITICAL 9.8
  • TI-2019-02936 Stack-based buffer overflow in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq… CVSS 3.1CRITICAL 9.8
  • TI-2019-02932 Cross-site scripting in Crestron AirMedia CVSS 3.1CRITICAL 9.8
  • TI-2019-02931 Cross-site scripting in Crestron AirMedia CVSS 3.1CRITICAL 9.8
  • TI-2019-02945 Hard-coded credentials in Crestron AirMedia CVSS 3.1CRITICAL 9.8
  • TI-2019-02937 Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to… CVSS 3.1HIGH 8.8
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences