CVE-2016-5671

The CVE-2016-5671 issue affects Crestron DM-TXRX-100-STR devices running firmware up to 1.3039.00040. The NVD entry describes multiple CSRF vulnerabilities in the device’s web interface that can allow remote attackers to hijack user authentication. Crestron’s vendor statement notes that CSRF (CVE...