CVE-2019-3910
Published Jan 18, 2019Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script. Unauthenticated remote users can use the bypass to acce…
Vendor/product archive
crestron / airmedia_am-100 CVEs
Beta · best-effort5 CVEs tagged to crestron / airmedia_am-100 — 2 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.
CVE-2017-16710
Published Jul 11, 2018Cross-site scripting (XSS) vulnerability in Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote attackers to in…
CVE-2017-16709
Published Jul 11, 2018Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via…
CVE-2016-5640
Published Aug 3, 2016Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via…
CVE-2016-5639
Published Aug 3, 2016Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a .. (…
Showing 1-5 of 5 CVEsPage 1 of 1