PT-2019-16783 · Extron+7 · Extron Sharelink 200/250+10

Jacob Baines · Published 2019-04-30 · Updated 2025-02-07 · CVE-2019-3929

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Crestron AM-100 version 1.6.0.2 Crestron AM-101 version 2.7.0.1 Barco wePresent WiPG-1000P version 2.3.0.10 Barco wePresent WiPG-1600W versions prior to 2.4.1.19 Extron ShareLink 200/250 version 2.0.3.4 Teq AV IT WIPS710 version 1.1.0.7 SHARP PN-L703WA version 1.4.2.3 Optoma WPS-Pro version 1.0.0.5 Blackbox HD WPS version 1.0.0.5 InFocus LiteShow3 version 1.0.16 InFocus LiteShow4 version 2.0.0.7

Description The issue allows a remote, unauthenticated attacker to execute operating system commands as root via command injection through the "file transfer.cgi" HTTP endpoint.

Recommendations For Crestron AM-100 version 1.6.0.2, consider disabling access to the "file transfer.cgi" endpoint until a patch is available. For Crestron AM-101 version 2.7.0.1, consider disabling access to the "file transfer.cgi" endpoint until a patch is available. For Barco wePresent WiPG-1000P version 2.3.0.10, consider disabling access to the "file transfer.cgi" endpoint until a patch is available. For Barco wePresent WiPG-1600W versions prior to 2.4.1.19, update to firmware 2.4.1.19 or later. For Extron ShareLink 200/250 version 2.0.3.4, consider disabling access to the "file transfer.cgi" endpoint until a patch is available. For Teq AV IT WIPS710 version 1.1.0.7, consider disabling access to the "file transfer.cgi" endpoint until a patch is available. For SHARP PN-L703WA version 1.4.2.3, consider disabling access to the "file transfer.cgi" endpoint until a patch is available. For Optoma WPS-Pro version 1.0.0.5, consider disabling access to the "file transfer.cgi" endpoint until a patch is available. For Blackbox HD WPS version 1.0.0.5, consider disabling access to the "file transfer.cgi" endpoint until a patch is available. For InFocus LiteShow3 version 1.0.16, consider disabling access to the "file transfer.cgi" endpoint until a patch is available. For InFocus LiteShow4 version 2.0.0.7, consider disabling access to the "file transfer.cgi" endpoint until a patch is available.

Exploit

Fix

OS Command Injection

XSS

Weakness Enumeration

CWE-78

CWE-79

Related Identifiers

CVE-2019-3929

Affected Products

Barco Wepresent Wipg-1000P

Barco Wepresent Wipg-1600W

Blackbox Hd Wps

Crestron Am-100

Crestron Am-101

Extron Sharelink 200/250

Infocus Liteshow3

Infocus Liteshow4

Optoma Wps-Pro

Sharp Pn-L703Wa

Teq Av It Wips710

References · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/wepresent_cmd_injection.rb · Exploit
• 🔥 https://github.com/xfox64x/CVE-2019-3929 · Exploit
• 🔥 https://exploit-db.com/exploits/46786 · Exploit
• 🔥 https://exploit-db.com/exploits/47924 · Exploit
• 🔥 https://tenable.com/security/research/tra-2019-20 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-3929 · Security Note
• https://osv.dev/vulnerability/CVE-2019-3929 · Vendor Advisory
• https://t.me/cvenotify/110299 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-3929 · Note
• http://packetstormsecurity.com/files/152715/Barco-AWIND-OEM-Presentation-Platform-Unauthenticated-Remote-Command-Injection.html · Note
• https://t.me/cvenotify/110374 · Telegram Post
• http://packetstormsecurity.com/files/155948/Barco-WePresent-file_transfer.cgi-Command-Injection.html · Note