Skip to content

Crestron vulnerabilities

Products

Newest

crestron touchscreens x60, x70 series RECWAVE Filepath Traversal CVE-2025-47415 6.8 MediumSeptember 9, 2025
crestron touchscreen x60s, touchscreen x70 +1 more ConsoleFindCommandMatchList CVE-2025-47416 5.9 MediumSeptember 9, 2025
crestron touchscreens x70 Privilege escalation via SCP login CVE-2025-47421 8.6 HighSeptember 3, 2025
crestron automate vx User Permissions on Network API CVE-2025-47420 8.7 HighMay 6, 2025
crestron automate vx Non-Secure Access CVE-2025-47419 10.0 CriticalMay 6, 2025
crestron automate vx Recording CVE-2025-47418 5.3 MediumMay 6, 2025
crestron automate vx Enable Debug Images CVE-2025-47417 5.1 MediumMay 6, 2025
crestron idocv firmware, idocv idocview +1 more An issue in idocv v.14.1.3_20231228 allows a remote attacker to execute arbitrary code and obtain... CVE-2024-24377 9.8 CriticalFebruary 16, 2024
crestron am-300, am-300 firmware +1 more Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Crestron AM-300 CVE-2023-6926 8.4 HighJanuary 23, 2024
crestron 3-series control systems, cp3-gv 6506034 firmware, cp3 6504877 firmware +1 more +3 more On Crestron 3-Series Control Systems before 1.8001.0187, crafting and sending a specific BACnet... CVE-2023-38405 7.5 HighJuly 17, 2023
crestron airmedia Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to... CVE-2022-40298 8.8 HighSeptember 22, 2022
crestron airmedia A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in... CVE-2022-34101 7.8 HighSeptember 13, 2022
crestron airmedia Insufficient access control vulnerability was discovered in the Crestron AirMedia Windows... CVE-2022-34102 8.8 HighSeptember 13, 2022
crestron airmedia A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in... CVE-2022-34100 8.8 HighSeptember 13, 2022
crestron hd-md4x2-4k-e firmware An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web... CVE-2022-23178 Public exploit EPSS 75.2% 9.8 CriticalJanuary 15, 2022
crestron dm-nvx-dir-160 firmware, dm-nvx-dir-80 firmware, dm-nvx-dir-ent firmware +2 more On Crestron DM-NVX-DIR, DM-NVX-DIR80, and DM-NVX-ENT devices before the DM-XIO/1-0-3-802 patch,... CVE-2020-16839 7.5 HighJuly 27, 2021
crestron dmc-stro firmware Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to... CVE-2019-18184 9.8 CriticalNovember 27, 2019
crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials... CVE-2019-3939 9.8 CriticalApril 30, 2019
crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames,... CVE-2019-3938 7.8 HighApril 30, 2019
crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames,... CVE-2019-3937 7.8 HighApril 30, 2019
crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 is vulnerable to denial of... CVE-2019-3936 7.5 HighApril 30, 2019
crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to act as a... CVE-2019-3935 9.1 CriticalApril 30, 2019
crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass... CVE-2019-3934 5.3 MediumApril 30, 2019
crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass... CVE-2019-3933 5.3 MediumApril 30, 2019
crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to... CVE-2019-3932 EPSS 36.3% 9.8 CriticalApril 30, 2019
crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to... CVE-2019-3931 8.8 HighApril 30, 2019
barco wepresent wipg-1000p firmware, crestron am-100 firmware, am-101 firmware +10 more +12 more The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG... CVE-2019-3930 9.8 CriticalApril 30, 2019
barco wepresent wipg-1000p firmware, crestron am-100 firmware, am-101 firmware +11 more +13 more The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG... CVE-2019-3929 In KEVPublic exploit EPSS 99.0% 9.8 CriticalApril 30, 2019
crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allow any user to obtain... CVE-2019-3928 5.3 MediumApril 30, 2019
crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 anyone can change the... CVE-2019-3927 9.8 CriticalApril 30, 2019
crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command... CVE-2019-3926 9.8 CriticalApril 30, 2019
crestron am-100 firmware, am-101 firmware, airmedia +2 more Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command... CVE-2019-3925 9.8 CriticalApril 30, 2019
crestron airmedia am-100 firmware Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web... CVE-2019-3910 9.1 CriticalJanuary 18, 2019
crestron mc3 firmware, tsw-x60 firmware +1 more Crestron TSW-X60 all versions prior to 2.001.0037.001 and MC3 all versions prior to 1.502.0047.00... CVE-2018-13341 Public exploit 8.8 HighAugust 10, 2018
ics-cert crestron tsw-x60 version prior to 2.001.0037.001 and mc3 version prior to 1.502.0047.001, crestron mc3 firmware, tsw-x60 firmware +2 more For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001, The... CVE-2018-10630 EPSS 10.5% 9.8 CriticalAugust 10, 2018
crestron airmedia am-100 firmware, airmedia am-101 firmware +1 more Cross-site scripting (XSS) vulnerability in Crestron Airmedia AM-100 devices with firmware before... CVE-2017-16710 4.8 MediumJuly 11, 2018
crestron airmedia am-100 firmware, airmedia am-101 firmware +1 more Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware... CVE-2017-16709 Public exploit EPSS 73.9% 7.2 HighJuly 11, 2018
crestron dge-100, dm-dge-200-c, ts-1542-c +3 more +5 more Crestron DGE-100 Console Command Injection (FIXED) CVE-2018-5553 9.8 CriticalJuly 10, 2018
crestron toolbox protocol firmware Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001... CVE-2018-11229 9.8 CriticalJune 8, 2018
crestron toolbox protocol firmware Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001... CVE-2018-11228 9.8 CriticalJune 8, 2018
crestron dm-txrx-100-str firmware Multiple cross-site request forgery (CSRF) vulnerabilities on Crestron Electronics DM-TXRX-100... CVE-2016-5671 8.8 HighAugust 3, 2016
crestron dm-txrx-100-str firmware Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded... CVE-2016-5670 9.8 CriticalAugust 3, 2016
crestron dm-txrx-100-str firmware Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 use a hardcoded... CVE-2016-5669 9.8 CriticalAugust 3, 2016
crestron dm-txrx-100-str firmware Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote... CVE-2016-5668 9.8 CriticalAugust 3, 2016
crestron dm-txrx-100-str firmware Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote... CVE-2016-5667 9.8 CriticalAugust 3, 2016
crestron dm-txrx-100-str firmware Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 rely on the client... CVE-2016-5666 9.8 CriticalAugust 3, 2016
crestron airmedia am-100 firmware Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with... CVE-2016-5640 Public exploit EPSS 17.7% 9.8 CriticalAugust 3, 2016
crestron airmedia am-100 firmware Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with... CVE-2016-5639 Public exploit EPSS 20.8% 7.5 HighAugust 3, 2016