{"id":"CVE-2019-3929","aliases":["EUVD-2019-13536","GHSA-m297-v8rg-x5fh"],"status":"published","title":"The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG...","description":"The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.98952,"percentile":0.99928,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-78","CWE-79"],"published":"2019-04-30T20:21:09Z","modified":"2026-06-17T02:35:52Z","kev":{"date_added":"2022-04-15","due_date":"2022-05-06","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-04-15"},{"source":"kev","since":"2022-04-15"}],"exploits":[{"source":"metasploit","id":"exploit/linux/http/wepresent_cmd_injection","title":"Barco WePresent file_transfer.cgi Command Injection","type":"exploit","platform":"Linux,Unix","date":"2019-04-30","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/wepresent_cmd_injection"},{"source":"exploitdb","id":"EDB-46786","title":"Crestron AM/Barco wePresent WiPG/Extron ShareLink/Teq AV IT/SHARP PN-L703WA/Optoma WPS-Pro/Blackbox HD WPS/InFocus LiteShow - Remote Command Injection","type":"webapps","platform":"hardware","date":"2019-05-03","url":"https://www.exploit-db.com/exploits/46786"},{"source":"pocgithub","id":"xfox64x/CVE-2019-3929","title":"xfox64x/CVE-2019-3929","date":"2019-09-17","url":"https://github.com/xfox64x/CVE-2019-3929"},{"source":"exploitdb","id":"EDB-47924","title":"Barco WePresent - file_transfer.cgi Command Injection (Metasploit)","type":"remote","platform":"linux","date":"2020-01-15","verified":true,"url":"https://www.exploit-db.com/exploits/47924"},{"source":"nuclei","id":"CVE-2019-3929","title":"Barco/AWIND OEM Presentation Platform - Remote Command Injection","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3929.yaml"}],"products":[{"vendor":"barco","product":"wepresent_wipg-1000p_firmware"},{"vendor":"barco","product":"wepresent_wipg-1600w_firmware"},{"vendor":"blackbox","product":"hd_wireless_presentation_system_firmware"},{"vendor":"crestron","product":"am-100_firmware"},{"vendor":"crestron","product":"am-101_firmware"},{"vendor":"crestron","product":"crestron airmedia, barco wepresent, extron sharelink, teq av it wips710, sharp pn-l703wa, optoma wps-pro, blackbox hd wps, infocus liteshow3, and infocus liteshow4."},{"vendor":"crestron","product":"multiple products"},{"vendor":"extron","product":"sharelink_200_firmware"},{"vendor":"extron","product":"sharelink_250_firmware"},{"vendor":"infocus","product":"liteshow3_firmware"},{"vendor":"infocus","product":"liteshow4_firmware"},{"vendor":"optoma","product":"wps-pro_firmware"},{"vendor":"sharp","product":"pn-l703wa_firmware"},{"vendor":"teqavit","product":"wips710_firmware"}],"references":[{"url":"https://www.tenable.com/security/research/tra-2019-20","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/46786/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/152715/Barco-AWIND-OEM-Presentation-Platform-Unauthenticated-Remote-Command-Injection.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/155948/Barco-WePresent-file_transfer.cgi-Command-Injection.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-3929","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3929"},{"url":"https://www.exploit-db.com/exploits/46786"},{"url":"https://github.com/advisories/GHSA-m297-v8rg-x5fh"}],"sources":{"cve":[{"id":"CVE-2019-3929","description":"The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.","status":"published","published":"2019-04-30T20:21:09Z","modified":"2025-10-21T23:45:38.287Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:20:23.048861Z"}],"euvd":[{"id":"EUVD-2019-13536","description":"The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.","status":"published","published":"2019-04-30T20:21:09Z","modified":"2025-10-21T23:45:38Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2022-04-15","updated_at":"2026-11-02T20:31:24.172282Z"}],"ghsa":[{"id":"GHSA-m297-v8rg-x5fh","title":"The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG...","description":"The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.","status":"published","published":"2022-05-24T16:44:59Z","modified":"2025-10-22T00:31:39Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-78","CWE-79"],"updated_at":"2026-11-02T15:04:04.176931Z"}],"kev":[{"id":"CVE-2019-3929","title":"Crestron Multiple Products Command Injection Vulnerability","description":"Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.","cwes":["CWE-79"],"kev":{"date_added":"2022-04-15","due_date":"2022-05-06","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2019-3929","description":"The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.","status":"published","published":"2019-04-30T21:29:00.713Z","modified":"2026-06-17T02:35:52.86Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-79","CWE-78"],"updated_at":"2026-11-02T14:05:12.471695Z"}]}}