CVE-2019-3937

CVE-2019-3937 affects Crestron AM-100 (firmware 1.6.0.2) and AM-101 (firmware 2.7.0.2). The vulnerability stores usernames, passwords, slideshow passcode, and other configuration options in cleartext in /tmp/scfgdndf, allowing a local attacker to recover sensitive data. Connected documents corrob...

CVE-2019-3937

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, slideshow passcode, and other configuration options in cleartext in the file /tmp/scfgdndf. A local attacker can use this vulnerability to recover sensitive data...

CVE-2019-3936

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 is vulnerable to denial of service via a crafted request to TCP port 389. The request will force the slideshow to transition into a "stopped" state. A remote, unauthenticated attacker can use this vulnerability to stop an acti...

CVE-2019-3935

CVE-2019-3935 affects Crestron AM-100 (firmware 1.6.0.2) and AM-101 (firmware 2.7.0.2). The issue allows a remote, unauthenticated attacker to act as a moderator for a slide show by sending crafted HTTP POST requests to conference.cgi, enabling them to start, stop, and disconnect active slideshow...

CVE-2019-3935

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to act as a moderator to a slide show via crafted HTTP POST requests to conference.cgi. A remote, unauthenticated attacker can use this vulnerability to start, stop, and disconnect active slideshows...

CVE-2019-3934

CVE-2019-3934 affects Crestron AM-100 (firmware 1.6.0.2) and AM-101 (firmware 2.7.0.2). A crafted HTTP POST to login.cgi bypasses the presentation code, enabling a remote, unauthenticated attacker to download the current slide image without the access code. The available sources describe the affe...

CVE-2019-3933

The CVE-2019-3933 issue affects Crestron AM-100 (firmware 1.6.0.2) and AM-101 (firmware 2.7.0.2). The vulnerability allows a remote, unauthenticated attacker to bypass the presentation code by requesting /images/browserslide.jpg over HTTP, enabling watching a slideshow without the access code. No...

CVE-2019-3932

CVE-2019-3932 affects Crestron AM-100 (firmware 1.6.0.2) and AM-101 (firmware 2.7.0.2), causing authentication bypass due to a hard-coded password in return.tgi. A remote, unauthenticated attacker can use this to control external devices via the uart_bridge. In the connected documents, remediatio...

CVE-2019-3931

CVE-2019-3931 affects Crestron AM-100 (firmware 1.6.0.2) and AM-101 (firmware 2.7.0.2). The issue allows argument injection to curl via crafted HTTP requests to return.cgi, enabling a remote authenticated attacker to upload files and execute code as root. Connected sources (NVD/Red Hat PRION/CVE ...

CVE-2019-3931

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to argumention injection to the curl binary via crafted HTTP requests to return.cgi. A remote, authenticated attacker can use this vulnerability to upload files to the device and ultimately execute code as root...

CVE-2019-3928

CVE-2019-3928 affects Crestron AM-100 (firmware 1.6.0.2) and AM-101 (firmware 2.7.0.2): an unauthenticated remote attacker can obtain the presentation passcode via the OIDs iso.3.6.1.4.1.3212.100.3.2.7.4 and either access a restricted presentation or become the presenter. Connected sources confir...

CVE-2019-3928

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allow any user to obtain the presentation passcode via the iso.3.6.1.4.1.3212.100.3.2.7.4 OIDs. A remote, unauthenticated attacker can use this vulnerability to access a restricted presentation or to become the presenter...

CVE-2019-3927

CVE-2019-3927 concerns Crestron AM-100 (firmware 1.6.0.2) and AM-101 (firmware 2.7.0.2). The issue allows anyone to change the administrator or moderator passwords via the OIDs iso.3.6.1.4.1.3212.100.3.2.8.1 and iso.3.6.1.4.1.3212.100.3.2.8.2, enabling a remote, unauthenticated attacker to gain a...

CVE-2019-3926

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.14.1. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root...

CVE-2019-3926

Crestron AM-100 (firmware 1.6.0.2) and AM-101 (firmware 2.7.0.2) are affected by CVE-2019-3926 due to an unauthenticated SNMP command-injection flaw (OID iso.3.6.1.4.1.3212.100.3.2.14.1). The issue allows remote code execution as root. Public sources confirm this affects Crestron AirMedia devices...

CVE-2019-3925

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.9.3. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root...

CVE-2019-3925

CVE-2019-3925 affects Crestron AM-100 (firmware 1.6.0.2) and AM-101 (firmware 2.7.0.2). The vulnerability is a remote, unauthenticated command injection via SNMP with OID iso.3.6.1.4.1.3212.100.3.2.9.3, allowing an attacker to execute OS commands as root. Related Red Hat and CVE listings corrobor...

Crestron Electronics AM-100 and Crestron Electronics AM-101 Command Injection Vulnerabilities

The Crestron Electronics AM-100 and Crestron Electronics AM-101 are both a smart home gateway product from Crestron Electronics USA. A command injection vulnerability exists in the Crestron AM-100 with firmware version 1.6.0.2 and AM-101 with firmware version 2.7.0.2, which can be exploited by an...

PT-2019-16793 · Crestron · Crestron Am-100 +1

Name of the Vulnerable Software and Affected Versions: Crestron AM-100 version 1.6.0.2 Crestron AM-101 version 2.7.0.2 Description: The issue allows an unauthenticated, remote attacker to gain privileged access to the device using default credentials. The default credentials used are admin/admin...

PT-2019-16782 · Crestron · Crestron Am-100 +1

Name of the Vulnerable Software and Affected Versions: Crestron AM-100 version 1.6.0.2 Crestron AM-101 version 2.7.0.2 Description: The issue allows any user to obtain the presentation passcode via specific OIDs, iso.3.6.1.4.1.3212.100.3.2.7.4. A remote, unauthenticated attacker can exploit this ...