Записи Crestron
40 опубликованных записей вендора crestron.
Профиль для исследователя
- Попали в KEV
- 1 · 2,5 %
- С эксплойтом
- 2 · 5 %
- Pre-auth RCE
- 9
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- 1081 дн.
Повторяющиеся классы
- CWE-284 Improper Access Control7
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-287 Improper Authentication2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-255 Credentials Management Errors1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
40 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
99Срочно | CVE-2019-3929Готовый эксплойт | The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1crestron · am-100 firmware · CWE-79 | Критическая9,8 | KEV | 99,0 % | 30 апр. 2019 г. |
62На этой неделе | CVE-2022-23178Proof of concept | An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices.crestron · hd-md4x2-4k-e firmware · CWE-287 | Критическая9,8 | — | 75,2 % | 15 янв. 2022 г. |
50В плане | CVE-2017-16709Готовый эксплойт | Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated adminicrestron · airmedia am-100 firmware | Высокая7,2 | — | 72,0 % | 11 июл. 2018 г. |
50В плане | CVE-2019-3932Эксплойта нет | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to authentication bypass due to a hard-coded password crestron · am-100 firmware · CWE-249 | Критическая9,8 | — | 36,3 % | 30 апр. 2019 г. |
44В плане | CVE-2016-5640Proof of concept | Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attacrestron · airmedia am-100 firmware · CWE-77 | Критическая9,8 | — | 17,7 % | 2 авг. 2016 г. |
42В плане | CVE-2018-10630Эксплойта нет | For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001, The devices are shipped with authentication dicrestron · tsw-x60 firmware · CWE-284 | Критическая9,8 | — | 10,9 % | 10 авг. 2018 г. |
41В плане | CVE-2019-18184Эксплойта нет | Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function.crestron · dmc-stro firmware · CWE-78 | Критическая9,8 | — | 8,1 % | 27 нояб. 2019 г. |
41В плане | CVE-2018-11228Эксплойта нет | Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote codecrestron · crestron toolbox protocol firmware · CWE-94 | Критическая9,8 | — | 7,5 % | 7 июн. 2018 г. |
41В плане | CVE-2019-3930Эксплойта нет | The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1crestron · am-100 firmware · CWE-121 | Критическая9,8 | — | 7,0 % | 30 апр. 2019 г. |
41В плане | CVE-2019-3926Эксплойта нет | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.1crestron · am-100 firmware · CWE-79 | Критическая9,8 | — | 6,9 % | 30 апр. 2019 г. |
41В плане | CVE-2019-3925Эксплойта нет | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.1crestron · am-100 firmware · CWE-79 | Критическая9,8 | — | 6,9 % | 30 апр. 2019 г. |
41В плане | CVE-2018-11229Эксплойта нет | Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote codecrestron · crestron toolbox protocol firmware · CWE-78 | Критическая9,8 | — | 5,6 % | 7 июн. 2018 г. |
40В плане | CVE-2016-5668Эксплойта нет | Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication and change secrestron · dm-txrx-100-str firmware | Критическая9,8 | — | 4,4 % | 2 авг. 2016 г. |
40В плане | CVE-2016-5667Эксплойта нет | Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication via a direct crestron · dm-txrx-100-str firmware | Критическая9,8 | — | 4,4 % | 2 авг. 2016 г. |
40В плане | CVE-2016-5666Эксплойта нет | Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 rely on the client to perform authentication, which allows recrestron · dm-txrx-100-str firmware | Критическая9,8 | — | 4,2 % | 2 авг. 2016 г. |
40В плане | CVE-2016-5670Эксплойта нет | Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for the admin account, whicrestron · dm-txrx-100-str firmware · CWE-255 | Критическая9,8 | — | 3,2 % | 2 авг. 2016 г. |
40В плане | CVE-2019-3939Эксплойта нет | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin/admin and moderator/moderator for the wcrestron · am-100 firmware · CWE-16 | Критическая9,8 | — | 2,8 % | 30 апр. 2019 г. |
40В плане | CVE-2018-5553Эксплойта нет | Crestron DGE-100 Console Command Injection (FIXED)crestron · dge-100 firmware · CWE-78 | Критическая9,8 | — | 2,5 % | 10 июл. 2018 г. |
40В плане | CVE-2019-3927Эксплойта нет | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 anyone can change the administrator and moderator passwords via the icrestron · am-100 firmware · CWE-284 | Критическая9,8 | — | 2,2 % | 30 апр. 2019 г. |
39Наблюдать | CVE-2019-3910Эксплойта нет | Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script.crestron · airmedia am-100 firmware | Критическая9,1 | — | 8,6 % | 18 янв. 2019 г. |
39Наблюдать | CVE-2016-5669Эксплойта нет | Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 use a hardcoded 0xb9eed4d955a59eb3 X.509 certificate from an crestron · dm-txrx-100-str firmware | Критическая9,8 | — | 1,6 % | 2 авг. 2016 г. |
37Наблюдать | CVE-2019-3931Эксплойта нет | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to argumention injection to the curl binary via craftecrestron · am-100 firmware · CWE-88 | Высокая8,8 | — | 5,8 % | 30 апр. 2019 г. |
37Наблюдать | CVE-2019-3935Эксплойта нет | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to act as a moderator to a slide show via crafted HTTP crestron · am-100 firmware · CWE-284 | Критическая9,1 | — | 3,3 % | 30 апр. 2019 г. |
36Наблюдать | CVE-2016-5639Proof of concept | Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attaccrestron · airmedia am-100 firmware · CWE-22 | Высокая7,5 | — | 20,8 % | 2 авг. 2016 г. |
36Наблюдать | CVE-2018-13341Proof of concept | Crestron TSW-X60 all versions prior to 2.001.0037.001 and MC3 all versions prior to 1.502.0047.00, The passwords for special sudo accounts mcrestron · tsw-x60 firmware | Высокая8,8 | — | 3,7 % | 10 авг. 2018 г. |
- CVE-2019-392999Срочно
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1
КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 99 %crestron · am-100 firmware30 апр. 2019 г.
- CVE-2022-2317862На этой неделе
An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices.
КритическаяCVSS 9,8Proof of conceptEPSS 75 %crestron · hd-md4x2-4k-e firmware15 янв. 2022 г.
- CVE-2017-1670950В плане
Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated admini
ВысокаяCVSS 7,2Готовый эксплойтEPSS 72 %crestron · airmedia am-100 firmware11 июл. 2018 г.
- CVE-2019-393250В плане
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to authentication bypass due to a hard-coded password
КритическаяCVSS 9,8Эксплойта нетEPSS 36 %crestron · am-100 firmware30 апр. 2019 г.
- CVE-2016-564044В плане
Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote atta
КритическаяCVSS 9,8Proof of conceptEPSS 18 %crestron · airmedia am-100 firmware2 авг. 2016 г.
- CVE-2018-1063042В плане
For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001, The devices are shipped with authentication di
КритическаяCVSS 9,8Эксплойта нетEPSS 11 %crestron · tsw-x60 firmware10 авг. 2018 г.
- CVE-2019-1818441В плане
Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function.
КритическаяCVSS 9,8Эксплойта нетEPSS 8 %crestron · dmc-stro firmware27 нояб. 2019 г.
- CVE-2018-1122841В плане
Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code
КритическаяCVSS 9,8Эксплойта нетEPSS 7 %crestron · crestron toolbox protocol firmware7 июн. 2018 г.
- CVE-2019-393041В плане
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1
КритическаяCVSS 9,8Эксплойта нетEPSS 7 %crestron · am-100 firmware30 апр. 2019 г.
- CVE-2019-392641В плане
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.1
КритическаяCVSS 9,8Эксплойта нетEPSS 7 %crestron · am-100 firmware30 апр. 2019 г.
- CVE-2019-392541В плане
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.1
КритическаяCVSS 9,8Эксплойта нетEPSS 7 %crestron · am-100 firmware30 апр. 2019 г.
- CVE-2018-1122941В плане
Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code
КритическаяCVSS 9,8Эксплойта нетEPSS 6 %crestron · crestron toolbox protocol firmware7 июн. 2018 г.
- CVE-2016-566840В плане
Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication and change se
КритическаяCVSS 9,8Эксплойта нетEPSS 4 %crestron · dm-txrx-100-str firmware2 авг. 2016 г.
- CVE-2016-566740В плане
Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication via a direct
КритическаяCVSS 9,8Эксплойта нетEPSS 4 %crestron · dm-txrx-100-str firmware2 авг. 2016 г.
- CVE-2016-566640В плане
Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 rely on the client to perform authentication, which allows re
КритическаяCVSS 9,8Эксплойта нетEPSS 4 %crestron · dm-txrx-100-str firmware2 авг. 2016 г.
- CVE-2016-567040В плане
Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for the admin account, whi
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %crestron · dm-txrx-100-str firmware2 авг. 2016 г.
- CVE-2019-393940В плане
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin/admin and moderator/moderator for the w
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %crestron · am-100 firmware30 апр. 2019 г.
- CVE-2018-555340В плане
Crestron DGE-100 Console Command Injection (FIXED)
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %crestron · dge-100 firmware10 июл. 2018 г.
- CVE-2019-392740В плане
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 anyone can change the administrator and moderator passwords via the i
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %crestron · am-100 firmware30 апр. 2019 г.
- CVE-2019-391039Наблюдать
Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script.
КритическаяCVSS 9,1Эксплойта нетEPSS 9 %crestron · airmedia am-100 firmware18 янв. 2019 г.
- CVE-2016-566939Наблюдать
Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 use a hardcoded 0xb9eed4d955a59eb3 X.509 certificate from an
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %crestron · dm-txrx-100-str firmware2 авг. 2016 г.
- CVE-2019-393137Наблюдать
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to argumention injection to the curl binary via crafte
ВысокаяCVSS 8,8Эксплойта нетEPSS 6 %crestron · am-100 firmware30 апр. 2019 г.
- CVE-2019-393537Наблюдать
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to act as a moderator to a slide show via crafted HTTP
КритическаяCVSS 9,1Эксплойта нетEPSS 3 %crestron · am-100 firmware30 апр. 2019 г.
- CVE-2016-563936Наблюдать
Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attac
ВысокаяCVSS 7,5Proof of conceptEPSS 21 %crestron · airmedia am-100 firmware2 авг. 2016 г.
- CVE-2018-1334136Наблюдать
Crestron TSW-X60 all versions prior to 2.001.0037.001 and MC3 all versions prior to 1.502.0047.00, The passwords for special sudo accounts m
ВысокаяCVSS 8,8Proof of conceptEPSS 4 %crestron · tsw-x60 firmware10 авг. 2018 г.