CVE-2016-5666: Critical severity crestron dm-txrx-100-str firmware vulnerability
Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 rely on the client to perform authentication, which allows remote attackers to obtain access by setting the value of objresp.authenabled to 1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5666?
CVE-2016-5666 is considered to be of high severity due to the potential for unauthorized remote access.
How do I fix CVE-2016-5666?
To address CVE-2016-5666, update the firmware of the Crestron DM-TXRX-100-STR device to version 1.3039.00040 or later.
What systems are affected by CVE-2016-5666?
CVE-2016-5666 affects Crestron DM-TXRX-100-STR devices running firmware versions prior to 1.3039.00040.
What is the exploit method for CVE-2016-5666?
CVE-2016-5666 can be exploited by remote attackers who manipulate the authentication settings on vulnerable devices.
Are there any workarounds for CVE-2016-5666?
Currently, the only recommended workaround for CVE-2016-5666 is to upgrade to the latest firmware version.