CVE-2019-3936

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 is vulnerable to denial of service via a crafted request to TCP port 389. The request will force the slideshow to transition into a "stopped" state. A remote, unauthenticated attacker can use this vulnerability to stop an active slideshow.

• CWE-284

• https://www.tenable.com/security/research/tra-2019-20Third Party Advisory
• https://www.tenable.com/security/research/tra-2019-20Third Party Advisory

Published

Apr 30, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-3930The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmwa…9.8
• CVE-2019-3931Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…8.8
• CVE-2019-3932Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…9.8
• CVE-2019-3933Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…5.3
• CVE-2019-3934Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…5.3
• CVE-2019-3935Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…9.1
• CVE-2019-3937Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…7.8
• CVE-2019-3938Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…7.8
• CVE-2019-3939Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…9.8
• CVE-2019-3940Advantech WebAccess 8.3.4 is vulnerable to file upload attac…
• CVE-2019-3941Advantech WebAccess 8.3.4 allows unauthenticated, remote att…
• CVE-2019-3942Advantech WebAccess 8.3.4 does not properly restrict an RPC …7.5