Crestron Airmedia_am-100_firmware
5 CVEs affecting Crestron Airmedia_am-100_firmware. Latest disclosed: 2019-01-18. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-5640 | Critical | 9.8 | 2016-08-03 | Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute ar… |
CVE-2019-3910 | Critical | 9.1 | 2019-01-18 | Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script. Unauthenticated remote users can us… |
CVE-2016-5639 | High | 7.5 | 2016-08-03 | Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitr… |
CVE-2017-16709 | High | 7.2 | 2018-07-11 | Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute… |
CVE-2017-16710 | Medium | 4.8 | 2018-07-11 | Cross-site scripting (XSS) vulnerability in Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows re… |