VULNERABILITY INTELLIGENCE

CVE-2016-5666

CVSS score9.8 CRITICAL

EPSS probability4.20%

CISA KEVNot currently listed

Published2016-08-03

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 rely on the client to perform authentication, which allows remote attackers to obtain access by setting the value of objresp.authenabled to 1.

Primary references

cret@cert.org — Third Party Advisory, US Government Resource
cret@cert.org — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry