[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fB6sVtVTMeQb8B5qAKoqTgjDNcvtFUDfgyKHvWJhOskc":3,"g5a-family:crestron\u002Fam-100_firmware":121,"g5a-ex:crestron\u002Fam-100_firmware@*":122},{"success":4,"data":5},true,{"product":6,"versions":35,"topVulnerabilitiesByEpss":45,"kevVulnerabilities":93,"seoMetadata":99,"meta":118},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":34},"crestron","am-100_firmware",9,15,1,"2019-04-30",[14,18,20,22,24,26,28,30,32],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"1.0.2.1",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"1.0.2.6",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"1.1.0",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"1.1.0.12",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"1.1.0.14",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"1.1.0.15",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"1.1.1",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"1.1.1.10",{"version":33,"cve_count":10,"kev_count":11,"has_kev":4},"1.6.0.2","Am-100 Firmware by Crestron is a technology product with 9 tracked versions and 15 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[36,37,38,39,40,41,42,43,44],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":10,"kev_count":11,"has_kev":4},[46,53,57,63,67,71,74,78,84,89],{"cveId":47,"description":48,"publishedDate":12,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":4,"epssScore":52},"CVE-2019-3929","The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200\u002F250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.",9.8,"v3.1","Critical",0.98952,{"cveId":54,"description":55,"publishedDate":12,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":17,"epssScore":56},"CVE-2019-3932","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to authentication bypass due to a hard-coded password in return.tgi. A remote, unauthenticated attacker can use this vulnerability to control external devices via the uart_bridge.",0.36325,{"cveId":58,"description":59,"publishedDate":12,"cvssScore":60,"cvssVersion":50,"severity":61,"isKev":17,"epssScore":62},"CVE-2019-3934","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code sending a crafted HTTP POST request to login.cgi. A remote, unauthenticated attacker can use this vulnerability to download the current slide image without knowing the access code.",5.3,"Medium",0.07727,{"cveId":64,"description":65,"publishedDate":12,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":17,"epssScore":66},"CVE-2019-3930","The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200\u002F250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to a stack buffer overflow in libAwgCgi.so's PARSERtoCHAR function. A remote, unauthenticated attacker can use this vulnerability to execute arbitrary code as root via a crafted request to the return.cgi endpoint.",0.06957,{"cveId":68,"description":69,"publishedDate":12,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":17,"epssScore":70},"CVE-2019-3925","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.9.3. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.",0.0685,{"cveId":72,"description":73,"publishedDate":12,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":17,"epssScore":70},"CVE-2019-3926","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.14.1. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.",{"cveId":75,"description":76,"publishedDate":12,"cvssScore":60,"cvssVersion":50,"severity":61,"isKev":17,"epssScore":77},"CVE-2019-3933","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code simply by requesting \u002Fimages\u002Fbrowserslide.jpg via HTTP. A remote, unauthenticated attacker can use this vulnerability to watch a slideshow without knowing the access code.",0.0595,{"cveId":79,"description":80,"publishedDate":12,"cvssScore":81,"cvssVersion":50,"severity":82,"isKev":17,"epssScore":83},"CVE-2019-3931","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to argumention injection to the curl binary via crafted HTTP requests to return.cgi. A remote, authenticated attacker can use this vulnerability to upload files to the device and ultimately execute code as root.",8.8,"High",0.05773,{"cveId":85,"description":86,"publishedDate":12,"cvssScore":87,"cvssVersion":50,"severity":51,"isKev":17,"epssScore":88},"CVE-2019-3935","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to act as a moderator to a slide show via crafted HTTP POST requests to conference.cgi. A remote, unauthenticated attacker can use this vulnerability to start, stop, and disconnect active slideshows.",9.1,0.03334,{"cveId":90,"description":91,"publishedDate":12,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":17,"epssScore":92},"CVE-2019-3939","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin\u002Fadmin and moderator\u002Fmoderator for the web interface. An unauthenticated, remote attacker can use these credentials to gain privileged access to the device.",0.02764,[94],{"cveId":47,"description":48,"publishedDate":12,"cvssScore":49,"severity":51,"isKev":4,"epssScore":52,"cisaVulnName":95,"cisaDateAdded":96,"cisaShortDescription":97,"cisaRequiredAction":98},"Crestron Multiple Products Command Injection Vulnerability","2022-04-15","Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.","Apply updates per vendor instructions.",{"title":100,"metaDescription":101,"keywords":102,"structuredData":103},"Am-100 Firmware by Crestron - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Am-100 Firmware by Crestron covering 9 versions with 15 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Am-100 Firmware vulnerabilities, Am-100 Firmware security, Am-100 Firmware CVE, Crestron Am-100 Firmware, Am-100 Firmware threat intelligence, Crestron security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Am-100 Firmware KEV, Am-100 Firmware exploited vulnerabilities",{"@context":104,"@type":105,"name":106,"description":101,"url":107,"manufacturer":108,"applicationCategory":112,"softwareVersion":113,"mainEntity":114},"https:\u002F\u002Fschema.org","SoftwareApplication","Am-100 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcrestron\u002Fam-100_firmware",{"@type":109,"name":110,"url":111},"Organization","Crestron","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcrestron","Security Software","9 versions tracked",{"@type":115,"name":116,"description":117,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Am-100 Firmware Security Vulnerabilities","Security vulnerabilities affecting Am-100 Firmware by Crestron",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":119,"apiVersion":120},"2026-10-17T19:43:34.156Z","3.0",[],{"rows":123,"total":11,"capped":17,"failed":16},[124],{"cveId":47,"name":95,"severity":51,"cvss":49,"added":96,"epss":52,"published":125,"ranges":126,"checked":4,"hits":127,"covers":17},"2019-04-30T21:29:00.713",[33],[]]