CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. It may be remotely exploitable.
CVE
CVE-2019-3910
Severity
CRITICAL
CVSS
9.1
EPSS
8.56%
Original NVD Description
Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script. Unauthenticated remote users can use the bypass to access some administrator functionality such as configuring update sources and rebooting the device.
Related CVEs
Other vulnerabilities affecting the same vendor(s)