CVE-2019-3935: Critical severity crestron airmedia am-100 firmware vulnerability
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to act as a moderator to a slide show via crafted HTTP POST requests to conference.cgi. A remote, unauthenticated attacker can use this vulnerability to start, stop, and disconnect active slideshows.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-3935?
CVE-2019-3935 is a vulnerability in Crestron AM-100 and AM-101 devices that allows anyone to act as a moderator to a slide show via crafted HTTP POST requests to conference.cgi.
What is the severity of CVE-2019-3935?
CVE-2019-3935 has a severity rating of 9.1 (critical).
How does CVE-2019-3935 affect the Crestron AM-100 firmware?
CVE-2019-3935 affects Crestron AM-100 devices with firmware version 1.6.0.2.
How does CVE-2019-3935 affect the Crestron AM-101 firmware?
CVE-2019-3935 affects Crestron AM-101 devices with firmware version 2.7.0.2.
How can an attacker exploit CVE-2019-3935?
A remote, unauthenticated attacker can use CVE-2019-3935 to start, stop, and disconnect active slideshows on affected Crestron devices.