CoreCVE
Back

CRITICAL

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 anyone can change the administrator and moderator passwords via the iso.3.6.1.4.1.3212.100.3.2.8.1 and iso.3.6.1.4.1.3212.100.3.2.8.2 OIDs

Published Apr 30, 2019

Description

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 anyone can change the administrator and moderator passwords via the iso.3.6.1.4.1.3212.100.3.2.8.1 and iso.3.6.1.4.1.3212.100.3.2.8.2 OIDs. A remote, unauthenticated attacker can use this vulnerability to change the admin or moderator user's password and gain access to restricted areas on the HTTP interface.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-284

CWE-287

Improper Authentication

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner tenable
Published Apr 30, 2019
Updated Aug 4, 2024
Reserved Jan 3, 2019
Link CVE-2019-3927

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2019-3927

Red Hat

No data

ENISA EUVD

Assigner tenable
Published Apr 30, 2019
Updated Aug 4, 2024
Link EUVD-2019-13534

GitHub

No data