Skip to content

CVE-2016-5667 Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication via a direct request to a page other than index.html.

CriticalCVSS 9.8 EPSS 4.4%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication via a direct request to a page other than index.html.

Affected products

ProductAffected versionsFixed in
crestron dm-txrx-100-str firmware = 1.2866.00026 No fix listed

References

  • VU#974424 third-party-advisory us-government-resource
  • 92211 third-party-advisory vdb-entry