CVE-2019-3928
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-3928
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allow any user to obtain the presentation passcode via the iso.3.6.1.4.1.3212.100.3.2.7.4 OIDs. A remote, unauthenticated attacker can use this vulnerability to access a restricted presentation or to become the presenter.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
访问控制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Crestron Electronics AM-101 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Crestron AM-101是美国快思聪（Crestron）公司的一款智能家居网关产品。 带有固件1.6.0.2版本的Crestron AM-100和带有固件2.7.0.2版本的AM-101中存在安全漏洞。该漏洞源于网络系统或产品在运行过程中存在配置等错误。未授权的攻击者可利用漏洞获取受影响组件敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Crestron | Crestron AirMedia | AM-100 firmware 1.6.0.2 and AM-101 firmware 2.7.0.2 | - |
II. Public POCs for CVE-2019-3928
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-3928
请登录查看更多情报信息。
- https://www.tenable.com/security/research/tra-2019-20x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2019-3928
Same Patch Batch · Crestron · 2019-04-30 · 15 CVEs total
| CVE-2019-3925 | Crestron Electronics AM-100和Crestron Electronics AM-101 命令操作系统命令注入漏洞 | |
| CVE-2019-3926 | Crestron Electronics AM-100和Crestron Electronics AM-101 命令操作系统命令注入漏洞 | |
| CVE-2019-3927 | Crestron Electronics AM-100和Crestron Electronics AM-101 授权问题漏洞 | |
| CVE-2019-3929 | 多款路由器命令操作系统命令注入漏洞 | |
| CVE-2019-3930 | 多款路由器缓冲区错误漏洞 | |
| CVE-2019-3931 | Crestron Electronics AM-100和Crestron Electronics AM-101 参数注入漏洞 | |
| CVE-2019-3932 | Crestron Electronics AM-100和Crestron Electronics AM-101 信任管理问题漏洞 | |
| CVE-2019-3933 | Crestron Electronics AM-100和Crestron Electronics AM-101 访问控制错误漏洞 | |
| CVE-2019-3934 | Crestron Electronics AM-100和Crestron Electronics AM-101 访问控制错误漏洞 | |
| CVE-2019-3935 | Crestron AM-101 安全漏洞 | |
| CVE-2019-3936 | Crestron Electronics AM-100和Crestron Electronics AM-101 输入验证错误漏洞 | |
| CVE-2019-3937 | Crestron Electronics AM-100和Crestron Electronics AM-101 信任管理问题漏洞 | |
| CVE-2019-3938 | Crestron Electronics AM-100和Crestron Electronics AM-101 信任管理问题漏洞 | |
| CVE-2019-3939 | Crestron Electronics AM-100和Crestron Electronics AM-101 信任管理问题漏洞 |
IV. Related Vulnerabilities
Same product: Crestron AirMedia
- CVE-2019-3939
Crestron Electronics AM-100和Crestron Electronics AM-101 信任管理 - CVE-2019-3938
Crestron Electronics AM-100和Crestron Electronics AM-101 信任管理 - CVE-2019-3937
Crestron Electronics AM-100和Crestron Electronics AM-101 信任管理 - CVE-2019-3936
Crestron Electronics AM-100和Crestron Electronics AM-101 输入验证 - CVE-2019-3935
Crestron AM-101 安全漏洞
Same weakness: CWE-284
- CVE-2026-8233
Dotouch XproUPF access control - CVE-2026-42569
phpvms: /importer authorization bypass causing full database - CVE-2026-42205
Avo: Broken Access Control: Unauthorized Execution of Arbitr - CVE-2026-41487
Langfuse: Improper role-based-access control in Langfuse LLM - CVE-2026-42278
UltraDAG: Smart Account Spending Policy Bypass via Pockets
V. Comments for CVE-2019-3928
No comments yet