VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Jul 11, 2018· Updated Jun 17, 2026

CVE-2017-16710

CVE-2017-16710

Description

Cross-site scripting (XSS) vulnerability in Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

3
  • Crestron/AirMedia AM-1002 versions
    cpe:2.3:o:crestron:airmedia_am-100_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:crestron:airmedia_am-100_firmware:*:*:*:*:*:*:*:*range: <1.6.0
    • (no CPE)range: <1.6.0
  • Crestron/Airmedia Am 101 Firmware
    cpe:2.3:o:crestron:airmedia_am-101_firmware:*:*:*:*:*:*:*:*
    Range: <2.7.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.