Crestron AirMedia AM-100 and AM-101 Cross-Site Scripting Vulnerabilities

The Crestron AirMedia AM-100 and AM-101 are both gateway products from Crestron Electronics USA. A cross-site scripting vulnerability exists in the Crestron Airmedia AM-100 using firmware versions prior to 1.6.0 and the AM-101 using firmware versions prior to 2.7.0. A remote attacker can exploit...

CVE-2017-16710: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-16709: Undefined Security Weakness

Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors...

PT-2018-6307

Name of the Vulnerable Software and Affected Versions: Crestron Airmedia AM-100 versions prior to 1.6.0 Crestron Airmedia AM-101 versions prior to 2.7.0 Description: The issue allows remote authenticated administrators to execute arbitrary code via unspecified vectors. Recommendations: For Crestr...

PT-2018-6309

Name of the Vulnerable Software and Affected Versions: Crestron Airmedia AM-100 versions prior to 1.6.0 Crestron Airmedia AM-101 versions prior to 2.7.0 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...