468 matches found
Multiple Cross-Site Request Forgery Vulnerabilities in Crestron Electronics DM-TXRX-100-STR
The Crestron Electronics DM-TXRX-100-STR is a multimedia streaming codec. Multiple cross-site request forgery vulnerabilities exist in the Crestron Electronics DM-TXRX-100-STR 1.3039.00040. This could allow a remote attacker to hijack the authentication of arbitrary users...
Crestron Electronics DM-TXRX-100-STR Security Restriction Bypass Vulnerability
The Crestron Electronics DM-TXRX-100-STR is a multimedia streaming codec. A security vulnerability exists in the Crestron Electronics DM-TXRX-100-STR 1.3039.00040. It could allow a remote attacker to bypass authentication by directly requesting a non-index.html page...
CVE-2016-5670: Undefined Security Weakness
Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access via the web management interface...
CVE-2016-5671: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities on Crestron Electronics DM-TXRX-100-STR devices with firmware through 1.3039.00040 allow remote attackers to hijack the authentication of arbitrary users...
CVE-2016-5666: Undefined Security Weakness
Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 rely on the client to perform authentication, which allows remote attackers to obtain access by setting the value of objresp.authenabled to 1...
Crestron AirMedia AM-100 contains multiple vulnerabilities
Overview The Crestron AirMedia AM-100 with firmware prior to version 1.4.0.13 is vulnerable to path traversal and command injection. Description CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' - CVE-2016-5639 A path traversal vulnerability exists in login.cgi...
Crestron Electronics DM-TXRX-100-STR web interface contains multiple vulnerabilities
Overview Crestron Electronics DM-TXRX-100-STR, version 1.2866.00026 and earlier, has a web management interface which contains multiple vulnerabilities, including authentication bypass, failure to restrict access to authorized users, use of hard-coded certificate, default credentials, and...
