Trending
CVE-2019-3929

CVE detail

CVE-2019-3929

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.

CVSS 9.8 · CriticalBuzz score 41.0KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 41.0

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 11.0 · diversity 5.0 · KEV 25.0 · OTX 0.0 · PoC 0.0

Mention score

11.0

2 evidence mentions in the snapshot

Diversity score

5.0

1 sources across 1 categories

KEV score

25.0

Known exploited vulnerability present

OTX score

0.0

0 OTX pulses

PoC score

0.0

0 repos · best confidence N/A

Best PoC traction

Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions: 0; within the 30d window
Peak daily: 0; highest bucket

Evidence

Source links by recency

Newest mentions first

2 source links · newest first

Mirai Variant ECHOBOT Resurfaces with 13 Previously Unexploited VulnerabilitiesUnit42
Since October 2019, Unit 42 has been tracking a new ECHOBOT variant with 71 unique exploits, 13 of which haven’t been previously seen exploited in the wild prior to this version.
vendorunit42.paloaltonetworks.comDec 13, 2019, 9:56 PM
New Mirai Variant Adds 8 New Exploits, Targets Additional IoT DevicesUnit42
Our researchers have discovered a new Mirai variant that uses 8 new vulnerabilities and targets new IoT devices.
vendorunit42.paloaltonetworks.comJun 7, 2019, 12:00 AM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars

No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence

CVE-2019-3930
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron S…
CVSS 9.8 · Critical
CVE-2019-3926
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.14.1. A remote, unauthenticated…
CVSS 9.8 · Critical
CVE-2019-3925
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.9.3. A remote, unauthenticated a…
CVSS 9.8 · Critical
CVE-2019-3939
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin/admin and moderator/moderator for the web interface. An unauthenticated, remot…
CVSS 9.8 · Critical
CVE-2019-3938
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, and other configuration options in the file generated via the "export configura…
CVSS 7.8 · High
CVE-2019-3937
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, slideshow passcode, and other configuration options in cleartext in the file /t…
CVSS 7.8 · High

External lookup

Potential internet exposure

Potential exposure only — not proof of vulnerability.Shodan results indicate potentially internet-exposed products, not confirmed vulnerable systems. They do not confirm that any returned system is vulnerable to CVE-2019-3929.

Product-level CPE searches intentionally omit version fields and NVD version-range or configuration certainty. Verify the exact product version and configuration independently.

Sign-in required. Shodan requires you to sign in to run these filter searches.

Product CPE queries

Derived from this CVE's existing NVD CPE 2.3 records; the application, operating-system, or hardware part is retained.

cpe:2.3:h:barco:wepresent_wipg-1000pSearch this product on Shodan
cpe:2.3:o:barco:wepresent_wipg-1000p_firmwareSearch this product on Shodan
cpe:2.3:h:barco:wepresent_wipg-1600wSearch this product on Shodan
cpe:2.3:o:barco:wepresent_wipg-1600w_firmwareSearch this product on Shodan
cpe:2.3:h:blackbox:hd_wireless_presentation_systemSearch this product on Shodan
cpe:2.3:o:blackbox:hd_wireless_presentation_system_firmwareSearch this product on Shodan
cpe:2.3:h:crestron:am-100Search this product on Shodan
cpe:2.3:o:crestron:am-100_firmwareSearch this product on Shodan
cpe:2.3:h:crestron:am-101Search this product on Shodan
cpe:2.3:o:crestron:am-101_firmwareSearch this product on Shodan
cpe:2.3:h:extron:sharelink_200Search this product on Shodan
cpe:2.3:o:extron:sharelink_200_firmwareSearch this product on Shodan
cpe:2.3:h:extron:sharelink_250Search this product on Shodan
cpe:2.3:o:extron:sharelink_250_firmwareSearch this product on Shodan
cpe:2.3:h:infocus:liteshow3Search this product on Shodan
cpe:2.3:o:infocus:liteshow3_firmwareSearch this product on Shodan
cpe:2.3:h:infocus:liteshow4Search this product on Shodan
cpe:2.3:o:infocus:liteshow4_firmwareSearch this product on Shodan
cpe:2.3:h:optoma:wps-proSearch this product on Shodan
cpe:2.3:o:optoma:wps-pro_firmwareSearch this product on Shodan
cpe:2.3:h:sharp:pn-l703waSearch this product on Shodan
cpe:2.3:o:sharp:pn-l703wa_firmwareSearch this product on Shodan
cpe:2.3:h:teqavit:wips710Search this product on Shodan
cpe:2.3:o:teqavit:wips710_firmwareSearch this product on Shodan

Exact CVE query

Eligible paid Shodan plan required

Shodan's exact vuln: filter is separate from the product searches above and requires an eligible paid Shodan plan.

vuln:CVE-2019-3929Search this CVE on Shodan

These are outbound search links only. cvebuzz makes no Shodan API call, uses no Shodan API key, and does not display live result counts.

Metadata

Canonical fields

NVD status

Unavailable

Published

Apr 30, 2019

Modified

Jun 17, 2026

Official record

Authoritative NVD record

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE IDs

Vendor classifications

How this vector reads

CVSS 3.1 base metrics decoded below. This explanation does not recalculate or change the NVD score.

Attack Vector (AV): Network. The vulnerable system can be reached across network boundaries.
Attack Complexity (AC): Low. No special conditions beyond the attacker-controlled steps are required.
Privileges Required (PR): None. The attacker needs no privileges on the vulnerable system.
User Interaction (UI): None. Exploitation does not require another user to act.
Scope (S): Unchanged. Impacts remain within the vulnerable security authority.
Confidentiality Impact (C): High. There is a total or serious impact to this security property.
Integrity Impact (I): High. There is a total or serious impact to this security property.
Availability Impact (A): High. There is a total or serious impact to this security property.

Signals

Exploitation indicators

1 stored signals · KEV present · 0 OTX pulses

KEVKEV
- cwes: CWE-79
- dueDate: 2022-05-06
- knownRansomwareCampaignUse: Unknown
- notes: https://nvd.nist.gov/vuln/detail/CVE-2019-3929
- product: Multiple Products
- requiredAction: Apply updates per vendor instructions.
- shortDescription: Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.
- vendorProject: Crestron
- vulnerabilityName: Crestron Multiple Products Command Injection Vulnerability
Observed Apr 15, 2022, 12:00 AM