CVE-2016-5666

Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 rely on the client to perform authentication, which allows remote attackers to obtain access by setting the value of objresp.authenabled to 1.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cret@cert.org

Published

2016-08-03

Last modified

2024-08-06

Affected products

• Dm-txrx-100-str Firmware (Crestron)

References

• http://www.kb.cert.org/vuls/id/974424
• http://www.securityfocus.com/bid/92211