CyberRota Analysis
AI analysis pending.
CVE
CVE-2019-3927
Severity
CRITICAL
CVSS
9.8
EPSS
2.17%
Original NVD Description
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 anyone can change the administrator and moderator passwords via the iso.3.6.1.4.1.3212.100.3.2.8.1 and iso.3.6.1.4.1.3212.100.3.2.8.2 OIDs. A remote, unauthenticated attacker can use this vulnerability to change the admin or moderator user's password and gain access to restricted areas on the HTTP interface.
Related CVEs
Other vulnerabilities affecting the same vendor(s)