CRESTRON
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4. | 1 | 1 | Apr 30, 2019 |
| Automate VX | 4 | – | May 6, 2025 |
| TOUCHSCREEN x70 | 1 | – | Sep 9, 2025 |
| TOUCHSCREENS x60, x70 series | 1 | – | Sep 9, 2025 |
| TOUCHSCREENS x70 | 1 | – | Sep 3, 2025 |
| Touchscreen x60s | 1 | – | Sep 9, 2025 |
| AM-300 | 1 | – | Jan 23, 2024 |
Exploited and recent CVEs
- CVE-2019-3929 The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firm 99.0%
- CVE-2025-47415 RECWAVE Filepath Traversal 0.5%
- CVE-2025-47416 ConsoleFindCommandMatchList 0.4%
- CVE-2025-47416 ConsoleFindCommandMatchList 0.4%
- CVE-2025-47421 Privilege escalation via SCP login 0.4%
- CVE-2025-47420 User Permissions on Network API 0.4%
- CVE-2025-47419 Non-Secure Access 0.3%
- CVE-2025-47418 Recording 0.4%
- CVE-2025-47417 Enable Debug Images 0.4%
- CVE-2023-6926 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Crestron AM-300 0.5%