Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
On Crestron DM-NVX-DIR, DM-NVX-DIR80, and DM-NVX-ENT devices before the DM-XIO/1-0-3-802 patch, the password can be changed by sending an unauthenticated WebSocket request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多款 Crestron 设备授权问题漏洞
Vulnerability Description
Crestron Electronics Crestron DM-NVX-DIR和DM-NVX-ENT都是美国Crestron Electronics公司的一款虚拟交换设备。 多款 Crestron 设备中存在授权问题漏洞，该漏洞源于设备未对Websocket请求添加权限验证，攻击者可通过该漏洞发送未经认证的Websocket请求来修改密码。以下产品及版本受到影响：Crestron DM-NVX-DIR, DM-NVX-DIR80, DM-NVX-ENT 的 DM-XIO 1-0-3-802 补丁之前版本
CVSS Information
N/A
Vulnerability Type
N/A