Vulnerabilities

TI-2019-02936 CVE-2019-3930 · GHSA-xp69-2936-4v92

Stack-based buffer overflow in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq…

MEDIUM 52

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06957 Published 2019-04-30 No fix listed CWE-121

TI-2019-02935 CVE-2019-3929 · GHSA-m297-v8rg-x5fh

Cross-site scripting in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT…

CRITICAL 100KEV

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98952 Published 2019-04-30 No fix listed CWE-79

TI-2017-10992 CVE-2017-14972 · GHSA-gjrq-xhq7-vc79

InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded…

LOW 35

InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Delete, and then using Task Manager to reach a file.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01305 Published 2017-10-09 No fix listed CWE-287

TI-2014-06894 CVE-2014-8384 · GHSA-2w58-g8q7-6hhx

The InFocus IN3128HD projector with firmware 0.26 does not restrict access to…

MEDIUM 46

The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modify the DHCP server and device IP configuration, reboot the device, change the de…

CVSS 2.0HIGH 9.4 Network No auth Interaction — EPSS 0.03212 Published 2015-05-18 No fix listed

TI-2014-06893 CVE-2014-8383 · GHSA-r3wf-6w7v-wp38

The InFocus IN3128HD projector with firmware 0.26 allows remote attackers to bypass…

MEDIUM 48

The InFocus IN3128HD projector with firmware 0.26 allows remote attackers to bypass authentication via a direct request to main.html.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03033 Published 2015-05-18 No fix listed