Crestron Crestron AirMedia

Name: Crestron Crestron AirMedia
Brand: Crestron

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

6critical4high3medium0low

updated 2026-10-29

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-3932US	critical9.8OT high	36.3% (98th)	—	no fix	2019-04-30	≤ AM-100 firmware 1.6.0.2 and AM-101 firmware 2.7.0.2
CVE-2019-3934US	medium5.3	7.73% (95th)	—	no fix	2019-04-30	≤ AM-100 firmware 1.6.0.2 and AM-101 firmware 2.7.0.2
CVE-2019-3926US	critical9.8	6.85% (94th)	—	no fix	2019-04-30	≤ AM-100 firmware 1.6.0.2 and AM-101 firmware 2.7.0.2
CVE-2019-3925US	critical9.8	6.85% (94th)	—	no fix	2019-04-30	≤ AM-100 firmware 1.6.0.2 and AM-101 firmware 2.7.0.2
CVE-2019-3933US	medium5.3	5.95% (93rd)	—	no fix	2019-04-30	≤ AM-100 firmware 1.6.0.2 and AM-101 firmware 2.7.0.2
CVE-2019-3931US	high8.8	5.77% (93rd)	—	no fix	2019-04-30	≤ AM-100 firmware 1.6.0.2 and AM-101 firmware 2.7.0.2
CVE-2019-3935US	critical9.1	3.33% (89th)	—	no fix	2019-04-30	≤ AM-100 firmware 1.6.0.2 and AM-101 firmware 2.7.0.2
CVE-2019-3939US	critical9.8OT elevated	2.76% (86th)	—	no fix	2019-04-30	≤ AM-100 firmware 1.6.0.2 and AM-101 firmware 2.7.0.2
CVE-2019-3927US	critical9.8	2.17% (82nd)	—	no fix	2019-04-30	≤ AM-100 firmware 1.6.0.2 and AM-101 firmware 2.7.0.2
CVE-2019-3936US	high7.5	2.14% (82nd)	—	no fix	2019-04-30	≤ AM-100 firmware 1.6.0.2 and AM-101 firmware 2.7.0.2
CVE-2019-3928US	medium5.3	1.77% (78th)	—	no fix	2019-04-30	≤ AM-100 firmware 1.6.0.2 and AM-101 firmware 2.7.0.2
CVE-2019-3937US	high7.8OT elevated	0.28% (21st)	—	no fix	2019-04-30	≤ AM-100 firmware 1.6.0.2 and AM-101 firmware 2.7.0.2
CVE-2019-3938US	high7.8OT elevated	0.26% (18th)	—	no fix	2019-04-30	≤ AM-100 firmware 1.6.0.2 and AM-101 firmware 2.7.0.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control6 CVEs
CWE-798Use of Hard-coded Credentials3 CVEs
CWE-425Direct Request ('Forced Browsing')2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-16CWE-161 CVEs
CWE-249DEPRECATED: Often Misused: Path Manipulation1 CVEs
CWE-287Improper Authentication1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)13 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan