Crestron Dm-Txrx-100-Str
6 CVEs affecting Crestron Dm-Txrx-100-Str. Latest disclosed: 2016-08-03. Critical: 5, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-5670 | Critical | 9.8 | 2016-08-03 | Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for the admin account, which makes it easier… |
CVE-2016-5669 | Critical | 9.8 | 2016-08-03 | Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 use a hardcoded 0xb9eed4d955a59eb3 X.509 certificate from an OpenSSL Test Certif… |
CVE-2016-5668 | Critical | 9.8 | 2016-08-03 | Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication and change settings via a JSON A… |
CVE-2016-5667 | Critical | 9.8 | 2016-08-03 | Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication via a direct request to a page o… |
CVE-2016-5666 | Critical | 9.8 | 2016-08-03 | Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 rely on the client to perform authentication, which allows remote attackers to o… |
CVE-2016-5671 | High | 8.8 | 2016-08-03 | Multiple cross-site request forgery (CSRF) vulnerabilities on Crestron Electronics DM-TXRX-100-STR devices with firmware through 1.3039.00040 allow remote atta… |