CVE-2016-5639

High

Published: 03/08/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter.

Risk Assessment

An attacker could gain access to sensitive data on the device, potentially leading to further attacks on the organization's infrastructure.

Recommendation

It is recommended to update the firmware to version 1.4.0.13 or later to mitigate this vulnerability.

Other vulnerabilities in Crestron AirMedia AM-100

CVE-2016-5640Critical
Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the ATE_COMMAND parameter.

Original NVD description (English source)