Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 rely on the client to perform authentication, which allows remote attackers to obtain access by setting the value of objresp.authenabled to 1.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dm-txrx-100-str_firmware | Crestron | 1.2866.00026 (including) | 1.2866.00026 (including) |