Advisories · Technology
Crestron AirMedia.
Every CVE that names Crestron AirMedia among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin/admin and moderator/moderator for the web interface.
- Crestron AirMedia
- CWE-16
-
Insufficiently protected credentials in Crestron AirMedia
- Crestron AirMedia
- Hard-coded credentials
-
Cleartext storage of sensitive information in Crestron AirMedia
- Crestron AirMedia
- Information disclosure
-
Improper access control in Crestron AirMedia
- Crestron AirMedia
- Broken access control
-
Improper access control in Crestron AirMedia
- Crestron AirMedia
- Broken access control
-
Improper access control in Crestron AirMedia
- Crestron AirMedia
- Broken access control
-
Improper access control in Crestron AirMedia
- Crestron AirMedia
- Broken access control
-
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to authentication bypass due to a hard-coded password in return.tgi.
- Crestron AirMedia
- CWE-249
-
Argument injection in Crestron AirMedia
- Crestron AirMedia
- Command injection
-
Improper access control in Crestron AirMedia
- Crestron AirMedia
- Broken access control
-
Improper access control in Crestron AirMedia
- Crestron AirMedia
- Broken access control
-
Cross-site scripting in Crestron AirMedia
- Crestron AirMedia
- Cross-site scripting (XSS)
-
Cross-site scripting in Crestron AirMedia
- Crestron AirMedia
- Cross-site scripting (XSS)