CVE Catalog

CVE-2016-5671

High
Published: Translated: NVD NIST

Summary

Multiple cross-site request forgery (CSRF) vulnerabilities on Crestron Electronics DM-TXRX-100-STR devices with firmware through 1.3039.00040 allow remote attackers to hijack the authentication of arbitrary users.

Risk Assessment

Attackers can exploit these vulnerabilities to hijack user sessions, potentially leading to unauthorized access to systems and data.

Recommendation

It is recommended to update the firmware to the latest version to mitigate these vulnerabilities and implement additional security measures against CSRF attacks.

Other vulnerabilities in Crestron Electronics DM-TXRX-100-STR devices

Original NVD description (English source)

Multiple cross-site request forgery (CSRF) vulnerabilities on Crestron Electronics DM-TXRX-100-STR devices with firmware through 1.3039.00040 allow remote attackers to hijack the authentication of arbitrary users.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS