CVE-2019-3936 Denial of service in Crestron AirMedia

What is CVE-2019-3936?

CVE-2019-3936 is a high-severity denial of service vulnerability in Crestron AirMedia, published on 30 Apr 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 is vulnerable to denial of service via a crafted request to TCP port 389. The request will force the slideshow to transition into a "stopped" state. A remote, unauthenticated attacker can use this vulnerability to stop an active slideshow.

Weakness: CWE-284

Which versions are affected by CVE-2019-3936?

It affects 2 products.

Products include Crestron Am-100 Firmware, Crestron Am-101 Firmware.

How do I fix CVE-2019-3936?

No fix has been published for CVE-2019-3936 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2019-3936 being exploited?

There is no known exploitation of CVE-2019-3936 in the wild and no public exploit code.

Other vulnerabilities in Crestron AirMedia

• CVE-2019-3925 Command injection in Crestron AirMedia Critical 9.8
• CVE-2019-3926 Command injection in Crestron AirMedia Critical 9.8
• CVE-2019-3927 Auth bypass in Crestron AirMedia Critical 9.8
• CVE-2019-3932 Hardcoded credentials in Crestron AirMedia Critical 9.8
• CVE-2019-3939 Hardcoded credentials in Crestron AirMedia Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-vm5p-w959-c36r.