CVE-2016-5670

Critical

Published: 03/08/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Crestron Electronics DM-TXRX-100-STR devices with firmware before version 1.3039.00040 have a hardcoded password 'admin' for the admin account, making it easier for remote attackers to gain access via the web management interface.

Risk Assessment

This vulnerability poses a risk of unauthorized access to the devices, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to update the firmware to version 1.3039.00040 or later to remove the hardcoded password and enhance the security of the devices.

Original NVD description (English source)

Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access via the web management interface.