CVE-2019-3910
Last modified
CVE-2019-3910 is a vulnerability of currently unknown severity. Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script. Unauthenticated remote users can use the bypass to access some administrator functionality such as configuring update sources and rebooting the device.. EPSS estimates a 8.56% chance of exploitation in the next 30 days.
Description
Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script. Unauthenticated remote users can use the bypass to access some administrator functionality such as configuring update sources and rebooting the device.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Crestron | Airmedia Am-100 Firmware | < 1.6.0.2 |
References
- https://www.tenable.com/security/research/tra-2019-02Exploit, Third Party Advisory
- https://www.tenable.com/security/research/tra-2019-02Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-3910?
How severe is CVE-2019-3910?
How do I fix CVE-2019-3910?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-3903Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2019-3905Zoho ManageEngine ADSelfService Plus 5.x before build 5703 h…
- CVE-2019-3906Premisys Identicard version 3.1.190 contains hardcoded crede…8.8
- CVE-2019-3907Premisys Identicard version 3.1.190 stores user credentials …7.5
- CVE-2019-3908Premisys Identicard version 3.1.190 stores backup files as e…7.5
- CVE-2019-3909Premisys Identicard version 3.1.190 database uses default cr…
- CVE-2019-3911Reflected cross-site scripting (XSS) vulnerability in LabKey…6.1
- CVE-2019-3912An open redirect vulnerability in LabKey Server Community Ed…6.1
- CVE-2019-3913Command manipulation in LabKey Server Community Edition befo…4.9
- CVE-2019-3914Remote command injection vulnerability in Verizon Fios Quant…
- CVE-2019-3915Authentication Bypass by Capture-replay vulnerability in Ver…
- CVE-2019-3916Information disclosure vulnerability in Verizon Fios Quantum…
Are you affected by CVE-2019-3910?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST