CVE-2019-3939

Опубликовано: 30 апр. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin/admin and moderator/moderator for the web interface. An unauthenticated, remote attacker can use these credentials to gain privileged access to the device.

Ссылки

https://www.tenable.com/security/research/tra-2019-20
Third Party Advisory
https://www.tenable.com/security/research/tra-2019-20
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:crestron:am-100_firmware:1.6.0.2:*:*:*:*:*:*:*

cpe:2.3:h:crestron:am-100:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:crestron:am-101_firmware:2.7.0.2:*:*:*:*:*:*:*

cpe:2.3:h:crestron:am-101:-:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03597

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-16

CWE-798

Связанные уязвимости

GHSA-348m-h4rf-cr2v