Skip to content
OpenAdvisories
Unscored CVE-2019-3939 EUVD-2019-13546GHSA-348m-h4rf-cr2v

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin/admin and moderator/moderator for the …

Published Apr 30, 2019 · Updated Aug 4, 2024 · Assigned by tenable

Description

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin/admin and moderator/moderator for the web interface. An unauthenticated, remote attacker can use these credentials to gain privileged access to the device.

Affected products

VendorProductAffectedFixed
Crestron Crestron AirMedia AM-100 firmware 1.6.0.2 and AM-101 firmware 2.7.0.2 —

References