CVE-2019-3936CWE-284

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 is vulnerable to denial of service via a crafted request to TCP port 389

published April 30, 2019

CVSS
—
EPSS
2%
Percentile
81.9
In the wild
Unconfirmed
What it is

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 is vulnerable to denial of service via a crafted request to TCP port 389. The request will force the slideshow to transition into a "stopped" state. A remote, unauthenticated attacker can use this vulnerability to stop an active slideshow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02143 · 81.9th percentile
Weakness
CWE-284 · Improper Access Control
Published
2019-04-30T20:35Z
EPSS history
Timeline
  • 30 APR 20:35Z
    Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 is vulnerable to denial of service via a crafted request to TCP port 389
    cvelistv5