Skip to content
OpenAdvisories
Critical ICSA-16-049-02A 2 CVEs

AMX Multiple Products Credential Management Vulnerabilities (Update A)

Published Nov 21, 2016 · Updated Jun 5, 2025 · Revision 2

Vendor: Harman Product: DVX-2100HD-SP-T Master Product: DVX-21xxHD-SP (-T) Product: DVX-31xxHD-SP (-T) Product: Enova DGX 100 NX Series Master Product: Enova DGX 8/16/32/64 NI Series Master Product: Enova DGX 8/16/32/64 NX Series Master Product: Enova DVX-x2xx Product: Massio ControlPads MCP-10x Product: ME260/64 Duet Product: NI-2000 Product: NI-2100 Product: NI-2100 with ICSNet Product: NI-3000 Product: NI-3100 Product: NI-3100 with ICSNet Product: NI-3100/256 Product: NI-3100/256 with ICSNet Product: NI-3101-SIG Master Controller Product: NI-4000 Product: NI-4100 Product: NI-4100/256 Product: NI-700 Product: NI-900 Master Controllers (32M RAM) Product: NI-900 Master Controllers (64M RAM) Product: NX-1200 Product: NX-2200 Product: NX-3200 Product: NX-4200 NetLinx Controller

Vulnerabilities 2

  • Unscored —
    CVE-2015-8362

    The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2015-10-12 has a hardcoded password for the…

  • Unscored —
    CVE-2016-1984

    The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2016-01-20 has a hardcoded password for the…

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References