多款 Crestron 设备授权问题漏洞

Crestron Electronics Crestron DM-NVX-DIR and DM-NVX-ENT are both virtual switching devices from Crestron Electronics, Inc. An authorization issue vulnerability exists in multiple Crestron devices where an attacker can send an unauthenticated Websocket request to change a password because the devi...

CVE-2020-16839: Improper Authentication

On Crestron DM-NVX-DIR, DM-NVX-DIR80, and DM-NVX-ENT devices before the DM-XIO/1-0-3-802 patch, the password can be changed by sending an unauthenticated WebSocket request...

PT-2021-10075

Name of the Vulnerable Software and Affected Versions: Crestron DM-NVX-DIR versions prior to DM-XIO/1-0-3-802 patch Crestron DM-NVX-DIR80 versions prior to DM-XIO/1-0-3-802 patch Crestron DM-NVX-ENT versions prior to DM-XIO/1-0-3-802 patch Description: The issue allows the password to be changed ...