Approved changes feed: RSS · Atom

cpe:2.3:a:crestron:crestron_airmedia,_barco_wepresent,_extron_sharelink,_teq_av_it_wips710,_sharp_pn-l703wa,_optoma_wps-pro,_blackbox_hd_wps,_infocus_liteshow3,_and_infocus_liteshow4.:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCrestron (c3f889c7-b88c-556e-9a5e-f70525099cf1)
ProductCrestron Airmedia, Barco Wepresent, Extron Sharelink, Teq Av It Wips710, Sharp Pn L703Wa, Optoma Wps Pro, Blackbox Hd Wps, Infocus Liteshow3, And Infocus Liteshow4. (46b2f573-a1ab-5b60-8ef1-0b93453214ec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3930 vulnerable 2026-06-03 14:40:27.903039 Details available
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to a stack buffer overflow in libAwgCgi.so's PARSERtoCHAR function. A remote, unauthenticated attacker can use this vulnerability to execute arbitrary code as root via a crafted request to the return.cgi endpoint.
Published: 2019-04-30T20:25:56.000Z
Updated: 2024-08-04T19:26:27.743Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3929 vulnerable 2026-06-03 14:40:27.891020 Details available
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.
Published: 2019-04-30T20:21:09.000Z
Updated: 2025-10-21T23:45:38.287Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.