CVE-2016-5669

The affected product is Crestron DM-TXRX-100-STR devices with firmware before 1.3039.00040. The root cause is a hardcoded X.509 certificate (0xb9eed4d955a59eb3 from the OpenSSL Test Certification Authority) used for HTTPS, which enables an attacker to perform MITM by exploiting the device’s trust...