am-101 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/am-101/ Sun, 26 Feb 2023 06:33:16 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png am-101 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/am-101/ 32 32 CVE-2019-3925 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3925/ Sun, 26 Feb 2023 06:33:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3925/ Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.9.3. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.

The post CVE-2019-3925 appeared first on CVE Vulnerability.

]]> Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.9.3. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.

The post CVE-2019-3925 appeared first on CVE Vulnerability.

]]> CVE-2019-3926 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3926/ Sun, 26 Feb 2023 06:33:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3926/ Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.14.1. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.

The post CVE-2019-3926 appeared first on CVE Vulnerability.

]]> Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.14.1. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.

The post CVE-2019-3926 appeared first on CVE Vulnerability.

]]> CVE-2019-3927 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3927/ Sun, 26 Feb 2023 06:33:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3927/ Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 anyone can change the administrator and moderator passwords via the iso.3.6.1.4.1.3212.100.3.2.8.1 and iso.3.6.1.4.1.3212.100.3.2.8.2 OIDs. A remote, unauthenticated attacker can use this vulnerability to change the admin or moderator user’s password and gain access to restricted areas on the HTTP interface.

The post CVE-2019-3927 appeared first on CVE Vulnerability.

]]> Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 anyone can change the administrator and moderator passwords via the iso.3.6.1.4.1.3212.100.3.2.8.1 and iso.3.6.1.4.1.3212.100.3.2.8.2 OIDs. A remote, unauthenticated attacker can use this vulnerability to change the admin or moderator user’s password and gain access to restricted areas on the HTTP interface.

The post CVE-2019-3927 appeared first on CVE Vulnerability.

]]> CVE-2019-3928 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3928/ Sun, 26 Feb 2023 06:33:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3928/ Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allow any user to obtain the presentation passcode via the iso.3.6.1.4.1.3212.100.3.2.7.4 OIDs. A remote, unauthenticated attacker can use this vulnerability to access a restricted presentation or to become the presenter.

The post CVE-2019-3928 appeared first on CVE Vulnerability.

]]> Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allow any user to obtain the presentation passcode via the iso.3.6.1.4.1.3212.100.3.2.7.4 OIDs. A remote, unauthenticated attacker can use this vulnerability to access a restricted presentation or to become the presenter.

The post CVE-2019-3928 appeared first on CVE Vulnerability.

]]> CVE-2019-3931 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3931/ Sun, 26 Feb 2023 06:33:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3931/ Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to argumention injection to the curl binary via crafted HTTP requests to return.cgi. A remote, authenticated attacker can use this vulnerability to upload files to the device and ultimately execute code as root.

The post CVE-2019-3931 appeared first on CVE Vulnerability.

]]> Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to argumention injection to the curl binary via crafted HTTP requests to return.cgi. A remote, authenticated attacker can use this vulnerability to upload files to the device and ultimately execute code as root.

The post CVE-2019-3931 appeared first on CVE Vulnerability.

]]> CVE-2019-3932 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3932/ Sun, 26 Feb 2023 06:33:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3932/ Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to authentication bypass due to a hard-coded password in return.tgi. A remote, unauthenticated attacker can use this vulnerability to control external devices via the uart_bridge.

The post CVE-2019-3932 appeared first on CVE Vulnerability.

]]> Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to authentication bypass due to a hard-coded password in return.tgi. A remote, unauthenticated attacker can use this vulnerability to control external devices via the uart_bridge.

The post CVE-2019-3932 appeared first on CVE Vulnerability.

]]> CVE-2019-3933 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3933/ Sun, 26 Feb 2023 06:33:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3933/ Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code simply by requesting /images/browserslide.jpg via HTTP. A remote, unauthenticated attacker can use this vulnerability to watch a slideshow without knowing the access code.

The post CVE-2019-3933 appeared first on CVE Vulnerability.

]]> Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code simply by requesting /images/browserslide.jpg via HTTP. A remote, unauthenticated attacker can use this vulnerability to watch a slideshow without knowing the access code.

The post CVE-2019-3933 appeared first on CVE Vulnerability.

]]> CVE-2019-3934 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3934/ Sun, 26 Feb 2023 06:33:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3934/ Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code sending a crafted HTTP POST request to login.cgi. A remote, unauthenticated attacker can use this vulnerability to download the current slide image without knowing the access code.

The post CVE-2019-3934 appeared first on CVE Vulnerability.

]]> Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code sending a crafted HTTP POST request to login.cgi. A remote, unauthenticated attacker can use this vulnerability to download the current slide image without knowing the access code.

The post CVE-2019-3934 appeared first on CVE Vulnerability.

]]> CVE-2019-3935 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3935/ Sun, 26 Feb 2023 06:33:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3935/ Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to act as a moderator to a slide show via crafted HTTP POST requests to conference.cgi. A remote, unauthenticated attacker can use this vulnerability to start, stop, and disconnect active slideshows.

The post CVE-2019-3935 appeared first on CVE Vulnerability.

]]> Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to act as a moderator to a slide show via crafted HTTP POST requests to conference.cgi. A remote, unauthenticated attacker can use this vulnerability to start, stop, and disconnect active slideshows.

The post CVE-2019-3935 appeared first on CVE Vulnerability.

]]> CVE-2019-3936 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3936/ Sun, 26 Feb 2023 06:33:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3936/ Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 is vulnerable to denial of service via a crafted request to TCP port 389. The request will force the slideshow to transition into a “stopped” state. A remote, unauthenticated attacker can use this vulnerability to stop an active slideshow.

The post CVE-2019-3936 appeared first on CVE Vulnerability.

]]> Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 is vulnerable to denial of service via a crafted request to TCP port 389. The request will force the slideshow to transition into a “stopped” state. A remote, unauthenticated attacker can use this vulnerability to stop an active slideshow.

The post CVE-2019-3936 appeared first on CVE Vulnerability.

]]>