CVE-2019-3939: Critical severity crestron airmedia am-100 firmware vulnerability
Published Apr 30, 2019
·Updated
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin/admin and moderator/moderator for the web interface. An unauthenticated, remote attacker can use these credentials to gain privileged access to the device.
Affected Software
8 affected components
Crestron AM-100 firmware=1.6.0.2
Crestron AM-100
Crestron AM-101 firmware=2.7.0.2
Crestron AM-101
All of the following
Crestron AM-100 firmware=1.6.0.2
Crestron AM-100
All of the following
Crestron AM-101 firmware=2.7.0.2
Crestron AM-101
Event History
Apr 30, 2019
CVE Published
via MITRE·08:40 PM
Data Sourced
via MITRE·08:40 PM
DescriptionWeakness
Data Sourced
via NVD·09:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this Crestron issue?
The vulnerability ID for this Crestron issue is CVE-2019-3939.
2
What is the severity of CVE-2019-3939?
CVE-2019-3939 has a severity rating of 9.8, which is considered critical.
3
What software versions are affected by CVE-2019-3939?
CVE-2019-3939 affects Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2.
4
What are the default credentials for the web interface of Crestron AM-100 and AM-101?
The default credentials for the web interface of Crestron AM-100 are admin/admin, and for AM-101 are moderator/moderator.
5
How can an attacker exploit CVE-2019-3939?
An unauthenticated, remote attacker can exploit CVE-2019-3939 by using the default credentials to gain privileged access to the device.