CVE-2019-3929
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Analyzed - vulnreport@tenable.com
- Published
- 2019-04-30
- Last modified
- 2025-10-21
- Known exploited (CISA KEV)
- since 2022-04-15, action due 2022-05-06: Apply updates per vendor instructions.
- Weaknesses
- CWE-78, CWE-79
Affected products
- Wepresent Wipg-1000p Firmware (Barco)
- Wepresent Wipg-1600w Firmware (Barco)
- Hd Wireless Presentation System Firmware (Blackbox)
- Am-100 Firmware (Crestron)
- Am-101 Firmware (Crestron)
- And Infocus Liteshow4. (Crestron)
- Barco Wepresent (Crestron)
- Blackbox Hd Wps (Crestron)
- Crestron Airmedia (Crestron)
- Extron Sharelink (Crestron)
- Infocus Liteshow3 (Crestron)
- Optoma Wps-pro (Crestron)
- Sharp Pn-l703wa (Crestron)
- Teq Av It Wips710 (Crestron)
- Sharelink 200 Firmware (Extron)
- Sharelink 250 Firmware (Extron)
- Liteshow3 Firmware (Infocus)
- Liteshow4 Firmware (Infocus)
- Wps-pro Firmware (Optoma)
- Pn-l703wa Firmware (Sharp)
- Wips710 Firmware (Teqavit)
References
- http://packetstormsecurity.com/files/152715/Barco-AWIND-OEM-Presentation-Platform-Unauthenticated-Remote-Command-Inject…
- http://packetstormsecurity.com/files/155948/Barco-WePresent-file_transfer.cgi-Command-Injection.html
- https://www.exploit-db.com/exploits/46786/
- https://www.tenable.com/security/research/tra-2019-20
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-3929
