Skip to content
OpenAdvisories

Vendor

Crestron

24 known vulnerabilities.

Products

Crestron AirMedia 13 Automate VX 4 Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4. 2 AM-300 1 DGE-100 1 TS-1542-C 1 DM-DGE-200-C 1 TOUCHSCREEN x70 1 Touchscreen x60s 1 TOUCHSCREENS x60, x70 series 1 TOUCHSCREENS x70 1 TSW-X60 0 MC3 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.6
    CVE-2025-47421

    Privilege escalation via SCP login

    Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in CRESTRON TOUCHSCREENS x70 allows Argument Injection.This issue affects TOUCHSCREENS x70: from 3.001.0031.001 through 3.001.0034.001. A specially crafted SCP co…

    Crestron TOUCHSCREENS x70
  • High 8.7
    CVE-2025-47420

    User Permissions on Network API

    266 vulnerability in Crestron Automate VX allows Privilege Escalation.This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49.

    Crestron Automate VX
  • High 8.4
    CVE-2023-6926

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Crestron AM-300

    There is an OS command injection vulnerability in Crestron AM-300 firmware version 1.4499.00018 which may enable a user of a limited-access SSH session to escalate their privileges to root-level access.

    Crestron AM-300