Description
On Crestron DM-NVX-DIR, DM-NVX-DIR80, and DM-NVX-ENT devices before the DM-XIO/1-0-3-802 patch, the password can be changed by sending an unauthenticated WebSocket request.
Unscored
CVE-2020-16839
EUVD-2020-8800GHSA-899f-m5f4-9vc7
On Crestron DM-NVX-DIR, DM-NVX-DIR80, and DM-NVX-ENT devices before the DM-XIO/1-0-3-802 patch, the password can be changed by sending an u…
Published Jul 27, 2021 · Updated Aug 4, 2024 · Assigned by mitre