CVE-2019-3937CWE-312

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, slideshow passcode, and other configuration options in…

published April 30, 2019

CVSS
—
EPSS
0%
Percentile
19.7
In the wild
Unconfirmed
What it is

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, slideshow passcode, and other configuration options in cleartext in the file /tmp/scfgdndf. A local attacker can use this vulnerability to recover sensitive data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00282 · 19.7th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2019-04-30T20:38Z
EPSS history
Timeline
  • 30 APR 20:38Z
    Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, slideshow passcode, and other configuration options in…
    cvelistv5