Crestron vulnerabilities
24 published CVEs name Crestron among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 24
- Last 12 months
- 0
- Critical
- 10
- Known exploited
- 1
Critical 10High 7Medium 7Low 0Not scored 0
CVEs per yearBy the year they were published
- 20181
- 201915
- 20241
- 20257
Known exploitedNewest addition to KEV first
- CVE-2019-3929
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before…
Crestron · Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4.
ExploitedCritical9.8
Newest CVEs
- CVE-2025-47415
RECWAVE Filepath Traversal
CRESTRON · TOUCHSCREENS x60, x70 series
Medium6.8 - CVE-2025-47416
ConsoleFindCommandMatchList
CRESTRON · TOUCHSCREEN x70
Medium5.9 - CVE-2025-47421
Privilege escalation via SCP login
CRESTRON · TOUCHSCREENS x70
High8.6 - CVE-2025-47420
User Permissions on Network API
Crestron · Automate VX
High8.7 - CVE-2025-47419
Non-Secure Access
Crestron · Automate VX
Critical10.0 - CVE-2025-47418
Recording
Crestron · Automate VX
Medium5.3 - CVE-2025-47417
Enable Debug Images
Crestron · Automate VX
Medium5.1 - CVE-2023-6926
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Crestron AM-300
Crestron · AM-300
High8.4 - CVE-2019-3939
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin/admin and moderator/moderator for the web interface. An…
Crestron · Crestron AirMedia
Critical9.8 - CVE-2019-3938
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, and other configuration options in the file generated via…
Crestron · Crestron AirMedia
High7.8