PT-2019-16782 · Crestron · Crestron Am-100 +1

Name of the Vulnerable Software and Affected Versions: Crestron AM-100 version 1.6.0.2 Crestron AM-101 version 2.7.0.2 Description: The issue allows any user to obtain the presentation passcode via specific OIDs, iso.3.6.1.4.1.3212.100.3.2.7.4. A remote, unauthenticated attacker can exploit this ...

Crestron AirMedia AM-100 and AM-101 Cross-Site Scripting Vulnerabilities

The Crestron AirMedia AM-100 and AM-101 are both gateway products from Crestron Electronics USA. A cross-site scripting vulnerability exists in the Crestron Airmedia AM-100 using firmware versions prior to 1.6.0 and the AM-101 using firmware versions prior to 2.7.0. A remote attacker can exploit...

CVE-2017-16710

Cross-site scripting XSS vulnerability in Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-16709

Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors...

CVE-2017-16709

CVE-2017-16709 affects Crestron AirMedia AM-100 (firmware < 1.6.0) and AM-101 (firmware

CVE-2017-16710

The CVE-2017-16710 issue affects Crestron AirMedia AM-100 and AM-101 devices. Affected products: AM-100 firmware versions prior to 1.6.0 and AM-101 firmware versions prior to 2.7.0. Description specifies a cross-site scripting (XSS) vulnerability that enables a remote attacker to inject arbitrary...