Critical severity9.8NVD Advisory· Published Aug 3, 2016· Updated May 6, 2026
CVE-2016-5669
CVE-2016-5669
Description
Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 use a hardcoded 0xb9eed4d955a59eb3 X.509 certificate from an OpenSSL Test Certification Authority, which makes it easier for remote attackers to conduct man-in-the-middle attacks against HTTPS sessions by leveraging the certificate's trust relationship.
Affected products
1- cpe:2.3:o:crestron:dm-txrx-100-str_firmware:1.2866.00026:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.kb.cert.org/vuls/id/974424nvdThird Party AdvisoryUS Government ResourceVDB Entry
- www.securityfocus.com/bid/92211nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.