Vendor

    Crestron

    47 known vulnerabilities in products by Crestron, 1 of them actively exploited (CISA KEV).

    Key figures

    47

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    22

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Crestron
    CriticalCVE-2019-3929

    Crestron Multiple Products Command Injection Vulnerability

    In CISA KEValso in 4 other products

    		9.8
    CriticalCVE-2022-23178

    Crestron Hd-md4x2-4k-e Firmware: security vulnerability

    		9.8
    CriticalCVE-2019-3932

    Crestron AirMedia: DEPRECATED: Often Misused: Path Manipulation

    		9.8
    CriticalCVE-2016-5640

    Crestron AirMedia AM-100 Firmware: Path Traversal

    		9.8
    CriticalCVE-2018-10630

    Crestron Mc3 Firmware: Improper Access Control

    also in 1 other product

    		9.8
    CriticalCVE-2019-18184

    Crestron Dmc-stro Firmware: security vulnerability

    		9.8
    CriticalCVE-2018-11228

    Crestron Toolbox Protocol Firmware: Remote Code Execution

    		9.8
    CriticalCVE-2019-3930

    Barco wePresent WiPG-1000p Firmware: Stack-based Buffer Overflow

    also in 4 other products

    		9.8
    CriticalCVE-2019-3926

    Crestron AirMedia: Cross-site Scripting

    		9.8
    CriticalCVE-2019-3925

    Crestron AirMedia: Cross-site Scripting

    		9.8
    CriticalCVE-2018-11229

    Crestron Toolbox Protocol Firmware: Command Injection

    		9.8
    CriticalCVE-2019-3910

    Crestron AirMedia AM-100 Firmware: Authentication Bypass

    		9.1
    CriticalCVE-2016-5668

    Crestron DM-TXRX-100-STR Firmware: Authentication Bypass

    		9.8
    CriticalCVE-2016-5667

    Crestron DM-TXRX-100-STR Firmware: Authentication Bypass

    		9.8
    CriticalCVE-2016-5666

    Crestron DM-TXRX-100-STR Firmware: security vulnerability

    		9.8
    HighCVE-2017-16709

    Crestron AirMedia AM-100 Firmware: Code Execution

    		7.2
    HighCVE-2016-5639

    Crestron AirMedia AM-100 Firmware: Path Traversal

    		7.5
    HighCVE-2019-3931

    Crestron AirMedia: Argument Injection

    		8.8
    CriticalCVE-2016-5670

    Crestron DM-TXRX-100-STR Firmware: Hard-coded Credentials

    		9.8
    CriticalCVE-2019-3939

    Crestron AirMedia: Configuration

    		9.8
    CriticalCVE-2019-3935

    Crestron AirMedia: Improper Access Control

    		9.1
    HighCVE-2018-13341

    Crestron Mc3 Firmware: security vulnerability

    		8.8
    CriticalCVE-2018-5553

    Crestron DGE-100 Console Command Injection (FIXED)

    		9.8
    CriticalCVE-2019-3927

    Crestron AirMedia: Improper Access Control

    		9.8
    MediumCVE-2019-3934

    Crestron AirMedia: Improper Access Control

    		5.3

    All vulnerabilities in search

    Products

    Products by Crestron
    Crestron Am-100 Firmware151
    Crestron Am-101 Firmware151
    Crestron Airmedia130
    Crestron DM-TXRX-100-STR Firmware60
    Crestron AirMedia AM-100 Firmware50
    Airmedia40
    Automate Vx40