Extron vulnerabilities1 known to be exploited.
Extron has 3 published vulnerabilities across 13 products in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Sharelink 250 Firmware, with 2. If you run Extron software, patch the exploited flaws first.
The most recent Extron flaw added to the known-exploited list is CVE-2019-3929, on 15 April 2022. We keep watching the known-exploited list.
Which Extron products have the most vulnerabilities?
Sharelink 250 Firmware leads with 2 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Extron vulnerabilities are being exploited?
1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8Crestron Multiple Products Command Injection Vulnerability
Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint.
Which Extron flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 7.0%CVE-2019-3930Critical
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4,...
- 2.4%CVE-2024-50960High
A command injection vulnerability in the Nmap diagnostic tool in the admin web console of Extron SMP 111 <=3.01, SMP 351 <=2.16, SMP 352 <= 2.16, and SME 211 <= 3.02, allows a remote authenticated attacker to execute...
All Extron products we track.
7 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Sharelink 200 Firmwaresharelink_200_firmware2 vulnerabilities1 version
- Sharelink 250 Firmwaresharelink_250_firmware2 vulnerabilities1 version
- Sme 211 Firmwaresme_211_firmware1 vulnerability1 version
- Smp 111 Firmwaresmp_111_firmware1 vulnerability1 version
- Smp 351 Firmwaresmp_351_firmware1 vulnerability1 version
- Smp 352 Firmwaresmp_352_firmware1 vulnerability1 version
- Extroncorlibextroncorlib0 vulnerabilities1 version
This directory lists the 7 Extron products with at least one tracked version, of 13 in our catalogue.
Running Extron? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.
- Matched to
- Sharelink 200 on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 3 published vulnerabilities across 13 products and 7 versions from Extron. The most recent Extron flaw added to the known-exploited list is CVE-2019-3929, on 15 April 2022.
1 Extron vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2019-3929. The full list is on this page.
Sharelink 250 Firmware, with 2 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Extron products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.