Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2019-3910

Disclosure Date: January 18, 2019 (last updated November 27, 2024)
Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script. Unauthenticated remote users can use the bypass to access some administrator functionality such as configuring update sources and rebooting the device.
0
0
Attacker Value
Unknown

CVE-2017-16709

Disclosure Date: July 11, 2018 (last updated November 27, 2024)
Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors.
0
0
Attacker Value
Unknown

CVE-2017-16710

Disclosure Date: July 11, 2018 (last updated November 27, 2024)
Cross-site scripting (XSS) vulnerability in Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
0
Attacker Value
Unknown

CVE-2016-5639

Disclosure Date: August 03, 2016 (last updated November 25, 2024)
Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter.
0
0
Attacker Value
Unknown

CVE-2016-5640

Disclosure Date: August 03, 2016 (last updated November 25, 2024)
Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the ATE_COMMAND parameter.
0
0