CVE-2016-5669

Name of the Vulnerable Software and Affected Versions Crestron Electronics DM-TXRX-100-STR devices with firmware prior to 1.3039.00040

Description The issue allows remote attackers to conduct man-in-the-middle attacks against HTTPS sessions. This is due to the use of a hardcoded X.509 certificate from an OpenSSL Test Certification Authority, which creates a trust relationship that can be exploited.

Recommendations For Crestron Electronics DM-TXRX-100-STR devices with firmware prior to 1.3039.00040, update the firmware to version 1.3039.00040 or later to resolve the issue.