[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDWiHHxNN994kWPFr8M2OXlMtM8bSLa74qcxgteNqjmw":3,"g5a-family:crestron\u002Fam-101_firmware":95,"g5a-ex:crestron\u002Fam-101_firmware@*":96},{"success":4,"data":5},true,{"product":6,"versions":16,"topVulnerabilitiesByEpss":18,"kevVulnerabilities":67,"seoMetadata":73,"meta":92},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":15},"crestron","am-101_firmware",1,15,"2019-04-30",[13],{"version":14,"cve_count":10,"kev_count":9,"has_kev":4},"2.7.0.2","Am-101 Firmware by Crestron is a technology product with 1 tracked version and 15 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[17],{"version":14,"cve_count":10,"kev_count":9,"has_kev":4},[19,26,31,37,41,45,48,52,58,63],{"cveId":20,"description":21,"publishedDate":11,"cvssScore":22,"cvssVersion":23,"severity":24,"isKev":4,"epssScore":25},"CVE-2019-3929","The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200\u002F250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.",9.8,"v3.1","Critical",0.98952,{"cveId":27,"description":28,"publishedDate":11,"cvssScore":22,"cvssVersion":23,"severity":24,"isKev":29,"epssScore":30},"CVE-2019-3932","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to authentication bypass due to a hard-coded password in return.tgi. A remote, unauthenticated attacker can use this vulnerability to control external devices via the uart_bridge.",false,0.36325,{"cveId":32,"description":33,"publishedDate":11,"cvssScore":34,"cvssVersion":23,"severity":35,"isKev":29,"epssScore":36},"CVE-2019-3934","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code sending a crafted HTTP POST request to login.cgi. A remote, unauthenticated attacker can use this vulnerability to download the current slide image without knowing the access code.",5.3,"Medium",0.07727,{"cveId":38,"description":39,"publishedDate":11,"cvssScore":22,"cvssVersion":23,"severity":24,"isKev":29,"epssScore":40},"CVE-2019-3930","The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200\u002F250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to a stack buffer overflow in libAwgCgi.so's PARSERtoCHAR function. A remote, unauthenticated attacker can use this vulnerability to execute arbitrary code as root via a crafted request to the return.cgi endpoint.",0.06957,{"cveId":42,"description":43,"publishedDate":11,"cvssScore":22,"cvssVersion":23,"severity":24,"isKev":29,"epssScore":44},"CVE-2019-3925","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.9.3. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.",0.0685,{"cveId":46,"description":47,"publishedDate":11,"cvssScore":22,"cvssVersion":23,"severity":24,"isKev":29,"epssScore":44},"CVE-2019-3926","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.14.1. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.",{"cveId":49,"description":50,"publishedDate":11,"cvssScore":34,"cvssVersion":23,"severity":35,"isKev":29,"epssScore":51},"CVE-2019-3933","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code simply by requesting \u002Fimages\u002Fbrowserslide.jpg via HTTP. A remote, unauthenticated attacker can use this vulnerability to watch a slideshow without knowing the access code.",0.0595,{"cveId":53,"description":54,"publishedDate":11,"cvssScore":55,"cvssVersion":23,"severity":56,"isKev":29,"epssScore":57},"CVE-2019-3931","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to argumention injection to the curl binary via crafted HTTP requests to return.cgi. A remote, authenticated attacker can use this vulnerability to upload files to the device and ultimately execute code as root.",8.8,"High",0.05773,{"cveId":59,"description":60,"publishedDate":11,"cvssScore":61,"cvssVersion":23,"severity":24,"isKev":29,"epssScore":62},"CVE-2019-3935","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to act as a moderator to a slide show via crafted HTTP POST requests to conference.cgi. A remote, unauthenticated attacker can use this vulnerability to start, stop, and disconnect active slideshows.",9.1,0.03334,{"cveId":64,"description":65,"publishedDate":11,"cvssScore":22,"cvssVersion":23,"severity":24,"isKev":29,"epssScore":66},"CVE-2019-3939","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin\u002Fadmin and moderator\u002Fmoderator for the web interface. An unauthenticated, remote attacker can use these credentials to gain privileged access to the device.",0.02764,[68],{"cveId":20,"description":21,"publishedDate":11,"cvssScore":22,"severity":24,"isKev":4,"epssScore":25,"cisaVulnName":69,"cisaDateAdded":70,"cisaShortDescription":71,"cisaRequiredAction":72},"Crestron Multiple Products Command Injection Vulnerability","2022-04-15","Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.","Apply updates per vendor instructions.",{"title":74,"metaDescription":75,"keywords":76,"structuredData":77},"Am-101 Firmware by Crestron - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Am-101 Firmware by Crestron covering 1 version with 15 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Am-101 Firmware vulnerabilities, Am-101 Firmware security, Am-101 Firmware CVE, Crestron Am-101 Firmware, Am-101 Firmware threat intelligence, Crestron security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Am-101 Firmware KEV, Am-101 Firmware exploited vulnerabilities",{"@context":78,"@type":79,"name":80,"description":75,"url":81,"manufacturer":82,"applicationCategory":86,"softwareVersion":87,"mainEntity":88},"https:\u002F\u002Fschema.org","SoftwareApplication","Am-101 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcrestron\u002Fam-101_firmware",{"@type":83,"name":84,"url":85},"Organization","Crestron","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcrestron","Security Software","1 versions tracked",{"@type":89,"name":90,"description":91,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Am-101 Firmware Security Vulnerabilities","Security vulnerabilities affecting Am-101 Firmware by Crestron",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":93,"apiVersion":94},"2026-10-17T19:43:34.185Z","3.0",[],{"rows":97,"total":9,"capped":29,"failed":102},[98],{"cveId":20,"name":69,"severity":24,"cvss":22,"added":70,"epss":25,"published":99,"ranges":100,"checked":4,"hits":101,"covers":29},"2019-04-30T21:29:00.713",[14],[],0]