[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMDFlomRgAdFdhr3hnGndsDTK1nvY3NDPuTfmb5EU4T0":3,"g5a-family:crestron\u002Fam-100":93,"g5a-ex:crestron\u002Fam-100@*":96},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":65,"seoMetadata":71,"meta":90},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"crestron","am-100",0,15,1,"2019-04-30",[],"Am-100 by Crestron is a technology product and 15 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,24,29,35,39,43,46,50,56,61],{"cveId":18,"description":19,"publishedDate":12,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":4,"epssScore":23},"CVE-2019-3929","The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200\u002F250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.",9.8,"v3.1","Critical",0.98952,{"cveId":25,"description":26,"publishedDate":12,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":27,"epssScore":28},"CVE-2019-3932","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to authentication bypass due to a hard-coded password in return.tgi. A remote, unauthenticated attacker can use this vulnerability to control external devices via the uart_bridge.",false,0.36325,{"cveId":30,"description":31,"publishedDate":12,"cvssScore":32,"cvssVersion":21,"severity":33,"isKev":27,"epssScore":34},"CVE-2019-3934","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code sending a crafted HTTP POST request to login.cgi. A remote, unauthenticated attacker can use this vulnerability to download the current slide image without knowing the access code.",5.3,"Medium",0.07727,{"cveId":36,"description":37,"publishedDate":12,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":27,"epssScore":38},"CVE-2019-3930","The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200\u002F250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to a stack buffer overflow in libAwgCgi.so's PARSERtoCHAR function. A remote, unauthenticated attacker can use this vulnerability to execute arbitrary code as root via a crafted request to the return.cgi endpoint.",0.06957,{"cveId":40,"description":41,"publishedDate":12,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":27,"epssScore":42},"CVE-2019-3925","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.9.3. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.",0.0685,{"cveId":44,"description":45,"publishedDate":12,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":27,"epssScore":42},"CVE-2019-3926","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.14.1. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.",{"cveId":47,"description":48,"publishedDate":12,"cvssScore":32,"cvssVersion":21,"severity":33,"isKev":27,"epssScore":49},"CVE-2019-3933","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code simply by requesting \u002Fimages\u002Fbrowserslide.jpg via HTTP. A remote, unauthenticated attacker can use this vulnerability to watch a slideshow without knowing the access code.",0.0595,{"cveId":51,"description":52,"publishedDate":12,"cvssScore":53,"cvssVersion":21,"severity":54,"isKev":27,"epssScore":55},"CVE-2019-3931","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to argumention injection to the curl binary via crafted HTTP requests to return.cgi. A remote, authenticated attacker can use this vulnerability to upload files to the device and ultimately execute code as root.",8.8,"High",0.05773,{"cveId":57,"description":58,"publishedDate":12,"cvssScore":59,"cvssVersion":21,"severity":22,"isKev":27,"epssScore":60},"CVE-2019-3935","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to act as a moderator to a slide show via crafted HTTP POST requests to conference.cgi. A remote, unauthenticated attacker can use this vulnerability to start, stop, and disconnect active slideshows.",9.1,0.03334,{"cveId":62,"description":63,"publishedDate":12,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":27,"epssScore":64},"CVE-2019-3939","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin\u002Fadmin and moderator\u002Fmoderator for the web interface. An unauthenticated, remote attacker can use these credentials to gain privileged access to the device.",0.02764,[66],{"cveId":18,"description":19,"publishedDate":12,"cvssScore":20,"severity":22,"isKev":4,"epssScore":23,"cisaVulnName":67,"cisaDateAdded":68,"cisaShortDescription":69,"cisaRequiredAction":70},"Crestron Multiple Products Command Injection Vulnerability","2022-04-15","Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.","Apply updates per vendor instructions.",{"title":72,"metaDescription":73,"keywords":74,"structuredData":75},"Am-100 by Crestron - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Am-100 by Crestron with 15 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Am-100 vulnerabilities, Am-100 security, Am-100 CVE, Crestron Am-100, Am-100 threat intelligence, Crestron security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Am-100 KEV, Am-100 exploited vulnerabilities",{"@context":76,"@type":77,"name":78,"description":73,"url":79,"manufacturer":80,"applicationCategory":84,"softwareVersion":85,"mainEntity":86},"https:\u002F\u002Fschema.org","SoftwareApplication","Am-100","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcrestron\u002Fam-100",{"@type":81,"name":82,"url":83},"Organization","Crestron","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcrestron","Security Software","Multiple versions",{"@type":87,"name":88,"description":89,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Am-100 Security Vulnerabilities","Security vulnerabilities affecting Am-100 by Crestron",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":91,"apiVersion":92},"2026-10-17T19:43:34.005Z","3.0",[94],{"product":95,"cves":10},"am-100_firmware",{"rows":97,"total":11,"capped":27,"failed":9},[98],{"cveId":18,"name":67,"severity":22,"cvss":20,"added":68,"epss":23,"published":99,"ranges":100,"checked":4,"hits":101,"covers":27},"2019-04-30T21:29:00.713",[],[]]