Product by Crestron
Crestron Am-100 Firmware
15 known vulnerabilities in Crestron Am-100 Firmware (Crestron), 1 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-3929 | Crestron Multiple Products Command Injection Vulnerability In CISA KEValso in 5 other products | 9.8 | |
| Critical | CVE-2019-3932 | Crestron AirMedia: DEPRECATED: Often Misused: Path Manipulation | 9.8 | |
| Critical | CVE-2019-3930 | Barco wePresent WiPG-1000p Firmware: Stack-based Buffer Overflow | 9.8 | |
| Critical | CVE-2019-3926 | Crestron AirMedia: Cross-site Scripting | 9.8 | |
| Critical | CVE-2019-3925 | Crestron AirMedia: Cross-site Scripting | 9.8 | |
| High | CVE-2019-3931 | Crestron AirMedia: Argument Injection | 8.8 | |
| Critical | CVE-2019-3939 | Crestron AirMedia: Configuration | 9.8 | |
| Critical | CVE-2019-3935 | Crestron AirMedia: Improper Access Control | 9.1 | |
| Critical | CVE-2019-3927 | Crestron AirMedia: Improper Access Control | 9.8 | |
| Medium | CVE-2019-3934 | Crestron AirMedia: Improper Access Control | 5.3 | |
| Medium | CVE-2019-3933 | Crestron AirMedia: Improper Access Control | 5.3 | |
| High | CVE-2019-3936 | Crestron AirMedia: Improper Access Control | 7.5 | |
| Medium | CVE-2019-3928 | Crestron AirMedia: Improper Access Control | 5.3 | |
| High | CVE-2019-3937 | Crestron AirMedia: Cleartext Storage of Sensitive Information | 7.8 | |
| High | CVE-2019-3938 | Crestron AirMedia: Insufficiently Protected Credentials | 7.8 |