Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication via a direct request to a page other than index.html. <a href"http://cwe.mitre.org/data/definitions/425.html">CWE-425: Direct Request ('Forced Browsing')</a>
Publication date: Wed, 03 Aug 2016 06:59:00 +0000