PT-2016-6623 · Crestron Electronics · Dm-Txrx-100-Str

Carsten Eiram · Publicado 2016-08-03 · Atualizado 2016-08-15 · CVE-2016-5666

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Crestron Electronics DM-TXRX-100-STR devices with firmware prior to 1.3039.00040

Description The issue allows remote attackers to obtain access by setting the value of objresp.authenabled to 1, due to the device relying on the client to perform authentication.

Recommendations For Crestron Electronics DM-TXRX-100-STR devices with firmware prior to 1.3039.00040, update the firmware to version 1.3039.00040 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2016-5666

Produtos afetados

Dm-Txrx-100-Str

Referências · 4

• http://kb.cert.org/vuls/id/974424 · Nota
• https://osv.dev/vulnerability/CVE-2016-5666 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-5666 · Nota de Segurança
• http://securityfocus.com/bid/92211 · Nota