Airmedia Am 100 Firmware

airmedia_am-100_firmware

Vendor: Crestron • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-3910 1Crestron 1Airmedia Am 100 Firmware Jun 17, 2026 Jan 18, 2019 N/A· v4 9.1 CRITICAL· v3 8.5 HIGH· v2 Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script. Unauthenticated remote users can use the bypass to access some administrator functionality such...Show more Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script. Unauthenticated remote users can use the bypass to access some administrator functionality such as configuring update sources and rebooting the device.Show less
CVE-2017-16710 1Crestron 2Airmedia Am 100 Firmware Airmedia Am 101 Firmware Nov 21, 2024 Jul 11, 2018 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via uns...Show more Cross-site scripting (XSS) vulnerability in Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2017-16709 1Crestron 2Airmedia Am 100 Firmware Airmedia Am 101 Firmware Nov 21, 2024 Jul 11, 2018 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote authenticated administrators to execute arbitrary code via unspecified vectors.
CVE-2016-5640 1Crestron 1Airmedia Am 100 Firmware May 6, 2026 Aug 3, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the ATE_COMMAND parame...Show more Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the ATE_COMMAND parameter.Show less
CVE-2016-5639 1Crestron 1Airmedia Am 100 Firmware May 6, 2026 Aug 3, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter.