[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwQG6m9MG8OzEanYwB3IhY8J2b7sMkbNUvmEuKRFOlus":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":211,"kevVulnerabilities":263,"topProductsByCves":269,"seoMetadata":280,"meta":289},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":210},6656,"crestron",58,40,1,33,"2024-01-23","c",[16,22,26,29,32,37,40,46,49,54,59,63,66,70,73,76,79,82,85,88,91,94,97,100,103,106,109,112,115,118,121,124,127,130,133,137,141,145,148,151,154,157,160,163,166,169,173,176,179,182,186,189,192,195,198,201,204,207],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},29968,"am-100_firmware",9,15,"2019-04-30",{"id":23,"product_name":24,"version_count":25,"cve_count":20,"kev_count":11,"last_cve_update":21},29969,"am-101",0,{"id":27,"product_name":28,"version_count":11,"cve_count":20,"kev_count":11,"last_cve_update":21},29970,"am-101_firmware",{"id":30,"product_name":31,"version_count":25,"cve_count":20,"kev_count":11,"last_cve_update":21},29967,"am-100",{"id":33,"product_name":34,"version_count":25,"cve_count":35,"kev_count":25,"last_cve_update":36},29993,"dm-txrx-100-str",6,"2016-08-03",{"id":38,"product_name":39,"version_count":11,"cve_count":35,"kev_count":25,"last_cve_update":36},29994,"dm-txrx-100-str_firmware",{"id":41,"product_name":42,"version_count":43,"cve_count":44,"kev_count":25,"last_cve_update":45},29964,"airmedia_am-100_firmware",3,5,"2019-01-18",{"id":47,"product_name":48,"version_count":25,"cve_count":44,"kev_count":25,"last_cve_update":45},29963,"airmedia_am-100",{"id":50,"product_name":51,"version_count":11,"cve_count":52,"kev_count":25,"last_cve_update":53},29962,"airmedia",4,"2022-09-23",{"id":55,"product_name":56,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":58},30019,"tsw-x60_firmware",2,"2018-08-10",{"id":60,"product_name":61,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":62},29965,"airmedia_am-101","2018-07-11",{"id":64,"product_name":65,"version_count":11,"cve_count":57,"kev_count":25,"last_cve_update":62},29966,"airmedia_am-101_firmware",{"id":67,"product_name":68,"version_count":11,"cve_count":57,"kev_count":25,"last_cve_update":69},29979,"crestron_toolbox_protocol_firmware","2018-06-08",{"id":71,"product_name":72,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":69},29982,"dmc-str",{"id":74,"product_name":75,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":58},29997,"mc3",{"id":77,"product_name":78,"version_count":11,"cve_count":57,"kev_count":25,"last_cve_update":58},29998,"mc3_firmware",{"id":80,"product_name":81,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":69},30001,"tsw-1060",{"id":83,"product_name":84,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":58},30002,"tsw-1060-b-s",{"id":86,"product_name":87,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":69},30003,"tsw-1060-nc",{"id":89,"product_name":90,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":58},30004,"tsw-1060-nc-b-s",{"id":92,"product_name":93,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":58},30005,"tsw-1060-nc-w-s",{"id":95,"product_name":96,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":58},30006,"tsw-1060-w-s",{"id":98,"product_name":99,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":69},30007,"tsw-560",{"id":101,"product_name":102,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":58},30008,"tsw-560-b-s",{"id":104,"product_name":105,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":69},30009,"tsw-560-nc",{"id":107,"product_name":108,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":58},30010,"tsw-560-nc-b-s",{"id":110,"product_name":111,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":58},30011,"tsw-560-nc-w-s",{"id":113,"product_name":114,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":58},30012,"tsw-560-w-s",{"id":116,"product_name":117,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":69},30013,"tsw-760",{"id":119,"product_name":120,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":58},30014,"tsw-760-b-s",{"id":122,"product_name":123,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":69},30015,"tsw-760-nc",{"id":125,"product_name":126,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":58},30016,"tsw-760-nc-b-s",{"id":128,"product_name":129,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":58},30017,"tsw-760-nc-w-s",{"id":131,"product_name":132,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":58},30018,"tsw-760-w-s",{"id":134,"product_name":135,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":136},29996,"hd-md4x2-4k-e_firmware","2022-01-15",{"id":138,"product_name":139,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":140},30000,"ts-1542-c_firmware","2018-07-10",{"id":142,"product_name":143,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":144},29974,"cp3_6504877_firmware","2023-07-17",{"id":146,"product_name":147,"version_count":25,"cve_count":11,"kev_count":25,"last_cve_update":144},29975,"cp3-gv_6506034",{"id":149,"product_name":150,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":144},29976,"cp3-gv_6506034_firmware",{"id":152,"product_name":153,"version_count":25,"cve_count":11,"kev_count":25,"last_cve_update":144},29977,"cp3n_6505417",{"id":155,"product_name":156,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":144},29978,"cp3n_6505417_firmware",{"id":158,"product_name":159,"version_count":25,"cve_count":11,"kev_count":25,"last_cve_update":13},29971,"am-300",{"id":161,"product_name":162,"version_count":25,"cve_count":11,"kev_count":25,"last_cve_update":140},29980,"dge-100",{"id":164,"product_name":165,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":140},29981,"dge-100_firmware",{"id":167,"product_name":168,"version_count":25,"cve_count":11,"kev_count":25,"last_cve_update":140},29999,"ts-1542-c",{"id":170,"product_name":171,"version_count":25,"cve_count":11,"kev_count":25,"last_cve_update":172},29983,"dmc-stro","2019-11-27",{"id":174,"product_name":175,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":172},29984,"dmc-stro_firmware",{"id":177,"product_name":178,"version_count":25,"cve_count":11,"kev_count":25,"last_cve_update":140},29985,"dm-dge-200-c",{"id":180,"product_name":181,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":140},29986,"dm-dge-200-c_firmware",{"id":183,"product_name":184,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":185},29987,"dm-nvx-dir-160","2021-07-30",{"id":187,"product_name":188,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":185},29988,"dm-nvx-dir-160_firmware",{"id":190,"product_name":191,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":185},29989,"dm-nvx-dir-80",{"id":193,"product_name":194,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":185},29990,"dm-nvx-dir-80_firmware",{"id":196,"product_name":197,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":185},29991,"dm-nvx-dir-ent",{"id":199,"product_name":200,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":185},29992,"dm-nvx-dir-ent_firmware",{"id":202,"product_name":203,"version_count":25,"cve_count":11,"kev_count":25,"last_cve_update":144},29973,"cp3_6504877",{"id":205,"product_name":206,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":13},29972,"am-300_firmware",{"id":208,"product_name":209,"version_count":25,"cve_count":11,"kev_count":25,"last_cve_update":136},29995,"hd-md4x2-4k-e","Crestron is a technology vendor with 58 tracked products and 40 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[212,219,224,231,235,240,244,248,253,257],{"cveId":213,"description":214,"publishedDate":21,"cvssScore":215,"cvssVersion":216,"severity":217,"isKev":4,"epssScore":218},"CVE-2019-3929","The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200\u002F250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.",9.8,"v3.1","Critical",0.98952,{"cveId":220,"description":221,"publishedDate":136,"cvssScore":215,"cvssVersion":216,"severity":217,"isKev":222,"epssScore":223},"CVE-2022-23178","An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interface. Specifically, aj.html sends a JSON document with uname and upassword fields.",false,0.75159,{"cveId":225,"description":226,"publishedDate":62,"cvssScore":227,"cvssVersion":228,"severity":229,"isKev":222,"epssScore":230},"CVE-2017-16709","Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors.",7.2,"v3.0","High",0.71963,{"cveId":232,"description":233,"publishedDate":21,"cvssScore":215,"cvssVersion":216,"severity":217,"isKev":222,"epssScore":234},"CVE-2019-3932","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to authentication bypass due to a hard-coded password in return.tgi. A remote, unauthenticated attacker can use this vulnerability to control external devices via the uart_bridge.",0.36325,{"cveId":236,"description":237,"publishedDate":36,"cvssScore":238,"cvssVersion":228,"severity":229,"isKev":222,"epssScore":239},"CVE-2016-5639","Directory traversal vulnerability in cgi-bin\u002Flogin.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter.",7.5,0.20842,{"cveId":241,"description":242,"publishedDate":36,"cvssScore":215,"cvssVersion":228,"severity":217,"isKev":222,"epssScore":243},"CVE-2016-5640","Directory traversal vulnerability in cgi-bin\u002Frftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the ATE_COMMAND parameter.",0.17707,{"cveId":245,"description":246,"publishedDate":58,"cvssScore":215,"cvssVersion":228,"severity":217,"isKev":222,"epssScore":247},"CVE-2018-10630","For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001, The devices are shipped with authentication disabled, and there is no indication to users that they need to take steps to enable it. When compromised, the access to the CTP console is left open.",0.10511,{"cveId":249,"description":250,"publishedDate":45,"cvssScore":251,"cvssVersion":228,"severity":217,"isKev":222,"epssScore":252},"CVE-2019-3910","Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script. Unauthenticated remote users can use the bypass to access some administrator functionality such as configuring update sources and rebooting the device.",9.1,0.08559,{"cveId":254,"description":255,"publishedDate":172,"cvssScore":215,"cvssVersion":216,"severity":217,"isKev":222,"epssScore":256},"CVE-2019-18184","Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function.",0.0815,{"cveId":258,"description":259,"publishedDate":21,"cvssScore":260,"cvssVersion":216,"severity":261,"isKev":222,"epssScore":262},"CVE-2019-3934","Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code sending a crafted HTTP POST request to login.cgi. A remote, unauthenticated attacker can use this vulnerability to download the current slide image without knowing the access code.",5.3,"Medium",0.07727,[264],{"cveId":213,"description":214,"publishedDate":21,"cvssScore":215,"cvssVersion":216,"severity":217,"isKev":4,"epssScore":218,"cisaVulnName":265,"cisaDateAdded":266,"cisaShortDescription":267,"cisaRequiredAction":268},"Crestron Multiple Products Command Injection Vulnerability","2022-04-15","Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.","Apply updates per vendor instructions.",[270,271,272,273,274,275,276,277,278,279],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":24,"version_count":25,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":27,"product_name":28,"version_count":11,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":30,"product_name":31,"version_count":25,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":33,"product_name":34,"version_count":25,"cve_count":35,"kev_count":25,"last_cve_update":36},{"id":38,"product_name":39,"version_count":11,"cve_count":35,"kev_count":25,"last_cve_update":36},{"id":41,"product_name":42,"version_count":43,"cve_count":44,"kev_count":25,"last_cve_update":45},{"id":47,"product_name":48,"version_count":25,"cve_count":44,"kev_count":25,"last_cve_update":45},{"id":50,"product_name":51,"version_count":11,"cve_count":52,"kev_count":25,"last_cve_update":53},{"id":55,"product_name":56,"version_count":25,"cve_count":57,"kev_count":25,"last_cve_update":58},{"title":281,"metaDescription":282,"keywords":283,"structuredData":284},"Crestron - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Crestron covering 58 products with 40 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Crestron vulnerabilities, Crestron security, Crestron CVE, Crestron threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Crestron KEV, Crestron exploited vulnerabilities",{"@context":285,"@type":286,"name":287,"description":282,"url":288},"https:\u002F\u002Fschema.org","Organization","Crestron","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcrestron",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":290,"apiVersion":291},"2026-10-17T19:43:36.179Z","3.0"]