CVE-2016-5668: Critical severity crestron dm-txrx-100-str firmware vulnerability
Published Aug 3, 2016
·Updated
Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication and change settings via a JSON API call.
Affected Software
2 affected components
Crestron Dm-txrx-100-str Firmware=1.2866.00026
Crestron DM-TXRX-100-STR
Event History
Aug 3, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-5668?
CVE-2016-5668 is considered a critical vulnerability due to its potential for remote unauthorized access and settings modification.
2
How do I fix CVE-2016-5668?
To fix CVE-2016-5668, upgrade your Crestron DM-TXRX-100-STR device firmware to version 1.3039.00040 or later.
3
What devices are affected by CVE-2016-5668?
CVE-2016-5668 affects Crestron DM-TXRX-100-STR devices with firmware versions prior to 1.3039.00040.
4
What type of attack does CVE-2016-5668 allow?
CVE-2016-5668 allows remote attackers to bypass authentication and change device settings via a JSON API call.
5
Is there a workaround for CVE-2016-5668?
There is no documented workaround for CVE-2016-5668; the only solution is to update the firmware.