PT-2016-6625

CVE-2016-5668

Published

2016-08-03

Updated

2016-08-15

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Crestron Electronics DM-TXRX-100-STR devices with firmware prior to 1.3039.00040

Description The issue allows remote attackers to bypass authentication and change settings via a JSON API call.

Recommendations For devices with firmware prior to 1.3039.00040, update the firmware to version 1.3039.00040 or later to resolve the issue.

Exploitability

Fix

Researchers

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾