CVE-2019-3929

Crestron Multiple Products Command Injection

9.8 CRITICALActively exploited (CISA KEV)Public exploitEPSS 99.0%

Published30 Apr 2019
Added to CISA KEV15 Apr 2022
Remediation due6 May 2022

Description

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.

CVSS 3.1 breakdown

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Barco Wepresent Wipg-1000p Firmware2.3.0.10

Barco Wepresent Wipg-1600w Firmware< 2.4.1.19

Blackbox Hd Wireless Presentation System Firmware1.0.0.5

Crestron Am-100 Firmware1.6.0.2

Crestron Am-101 Firmware2.7.0.2

Extron Sharelink 200 Firmware2.0.3.4

Extron Sharelink 250 Firmware2.0.3.4

Infocus Liteshow3 Firmware1.0.16

Infocus Liteshow4 Firmware2.0.0.7

Optoma Wps-pro Firmware1.0.0.5

Sharp Pn-l703wa Firmware1.4.2.3

Teqavit Wips710 Firmware1.1.0.7

Remediation

Fixed in

Barco Wepresent Wipg-1600w Firmware≥ 2.4.1.19

References

http://packetstormsecurity.com/files/152715/Barco-AWIND-OEM-Presentation-Platform-Unauthenticated-Remote-Command-Injection.htmlThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/155948/Barco-WePresent-file_transfer.cgi-Command-Injection.htmlThird Party AdvisoryVDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-3929US Government Resource
https://www.exploit-db.com/exploits/46786/ExploitThird Party AdvisoryVDB Entry
https://www.tenable.com/security/research/tra-2019-20ExploitThird Party Advisory

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

Frequently asked

Is CVE-2019-3929 being actively exploited?

Yes. CVE-2019-3929 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 15 Apr 2022.

How severe is CVE-2019-3929?

CVE-2019-3929 has a CVSS 3.1 base score of 9.8, rated critical. EPSS estimates a 99.0% probability of exploitation.

Which products are affected by CVE-2019-3929?

Affected products include Barco Wepresent Wipg-1000p Firmware, Barco Wepresent Wipg-1600w Firmware, Blackbox Hd Wireless Presentation System Firmware, Crestron Am-100 Firmware, Crestron Am-101 Firmware, and 7 more.

How do I fix CVE-2019-3929?

Upgrade affected software to a fixed version, for example Barco Wepresent Wipg-1600w Firmware 2.4.1.19 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2019-3929 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, Secuno flags any affected asset as top-priority automatically. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.