Critical severity · published Apr 30, 2019
CVE-2019-3929
Crestron Multiple Products Command Injection Vulnerability
In wildKEV
9.8
CVSS
99%
EPSS
Yes
On KEV
Description
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)99.0% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Apr 15, 2022
Federal remediation dueMay 6, 2022
Ransomware campaign useNot known
Affected products
Which versions
CA
Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4. · Crestron
Crestron AM-100 firmware 1.6.0.2; Crestron AM-101 firmware 2.7.0.1; Barco wePresent WiPG-1000P firmware 2.3.0.10; Barco wePresent WiPG-1600W before firmware 2.4.1.19; Extron ShareLink 200/250 firmware 2.0.3.4; Teq AV IT WIPS710 firmware 1.1.0.7; +5 more · source: vendor
AF
Am-100 Firmware · Crestron
1.6.0.2 · source: NVD
AF
Am-101 Firmware · Crestron
2.7.0.2 · source: NVD
HW
HD Wireless Presentation System Firmware · Blackbox
1.0.0.5 · source: NVD
LF
Liteshow3 Firmware · Infocus
1.0.16 · source: NVD
LF
Liteshow4 Firmware · Infocus
2.0.0.7 · source: NVD
PF
Pn-l703wa Firmware · Sharp
1.4.2.3 · source: NVD
S2
Sharelink 200 Firmware · Extron
2.0.3.4 · source: NVD
S2
Sharelink 250 Firmware · Extron
2.0.3.4 · source: NVD
WW
Wepresent Wipg-1000p Firmware · Barco
2.3.0.10 · source: NVD
WW
Wepresent Wipg-1600w Firmware · Barco
before 2.4.1.19 · source: NVD
WF
Wips710 Firmware · Teqavit
1.1.0.7 · source: NVD
Affected product
CA
Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4.
Crestron
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-3929
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-3929
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_MISC
https://www.tenable.com/security/research/tra-2019-20
exploit
https://www.exploit-db.com/exploits/46786/
x_refsource_MISC
http://packetstormsecurity.com/files/152715/Barco-AWIND-OEM-Presentation-Platform-Unauthenticated-Remote-Command-Injection.html
x_refsource_MISC
http://packetstormsecurity.com/files/155948/Barco-WePresent-file_transfer.cgi-Command-Injection.html