Extron Vulnerabilities (3 CVEs)

CVE-2019-3929 Apr 30, 21:29 CRITICAL POC KEV THREAT Emergency

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Command Injection Sharp Am 100 Firmware Am 101 Firmware +16

NVD Exploit-DB

CVSS 3.1

9.8

EPSS

99.0%

CVE-2024-50960 Apr 15, 18:15 HIGH POC This Week

A command injection vulnerability in the Nmap diagnostic tool in the admin web console of Extron SMP 111 <=3.01, SMP 351 <=2.16, SMP 352 <= 2.16, and SME 211 <= 3.02, allows a remote authenticated. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Code Injection Smp 111 Firmware Smp 351 Firmware +3

NVD GitHub

CVSS 3.1

7.2

EPSS

4.3%

CVE-2019-3930 Apr 30, 21:29 CRITICAL POC Act Now

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Stack Overflow Sharp Am 100 Firmware +17

NVD

CVSS 3.1

9.8

EPSS

7.0%

Extron

Monthly