What is CVE-2019-3910?

CVE-2019-3910 is a critical-severity vulnerability in Crestron Airmedia Am-100. CVSS score: 9.1/10. Published 2019-01-18.

How severe is CVE-2019-3910?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Vulnerability in Crestron Airmedia Am-100

CVE-2019-3910

Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script. Unauthenticated remote users can use the bypass to access some administrator functionality such as configuring update sources and rebooting the device.

EPSS: 0.086 (94.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H.

Affected products

Crestron Airmedia_am-100
Crestron Airmedia_am-100_firmware
N/a Crestron Am-100 Before 1.6.0.2 — versions Crestron AM-100 Before 1.6.0.2

References

vulnreport@tenable.com (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-3910?: CVE-2019-3910 is a critical-severity vulnerability in Crestron Airmedia Am-100. CVSS score: 9.1/10. Published 2019-01-18.
How severe is CVE-2019-3910?: Critical severity. CVSS v3 base score is 9.1 out of 10.