PT-2016-6623 · Crestron Electronics · Dm-Txrx-100-Str

Carsten Eiram · Published 2016-08-03 · Updated 2016-08-15 · CVE-2016-5666

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Crestron Electronics DM-TXRX-100-STR devices with firmware prior to 1.3039.00040

Description The issue allows remote attackers to obtain access by setting the value of objresp.authenabled to 1, due to the device relying on the client to perform authentication.

Recommendations For Crestron Electronics DM-TXRX-100-STR devices with firmware prior to 1.3039.00040, update the firmware to version 1.3039.00040 or later to resolve the issue.

Fix

Related Identifiers

CVE-2016-5666

Affected Products

Dm-Txrx-100-Str

References · 4

• https://osv.dev/vulnerability/CVE-2016-5666 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5666 · Security Note
• http://kb.cert.org/vuls/id/974424 · Note
• http://securityfocus.com/bid/92211 · Note