CVE-2016-5668

Опубликовано: 03 авг. 2016

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication and change settings via a JSON API call.

Комментарий

CWE-306: Missing Authentication for Critical Function

Ссылки

http://www.kb.cert.org/vuls/id/974424
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/92211
Third Party Advisory
VDB Entry
http://www.kb.cert.org/vuls/id/974424
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/92211
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:crestron:dm-txrx-100-str_firmware:1.2866.00026:*:*:*:*:*:*:*

cpe:2.3:h:crestron:dm-txrx-100-str:-:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03438

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-6h53-p7q6-vgwc