← All advisories

High severity7.5NVD Advisory· Published Jul 17, 2023· Updated Jun 17, 2026

CVE-2023-38405

CVE-2023-38405

Description

On Crestron 3-Series Control Systems before 1.8001.0187, crafting and sending a specific BACnet packet can cause a crash.

Affected products

5

Crestron/Cp3 Gv 6506034 Firmware
cpe:2.3:o:crestron:cp3-gv_6506034_firmware:*:*:*:*:*:*:*:*
Range: <1.8001.0187
Crestron/Cp3 6504877 Firmware
cpe:2.3:o:crestron:cp3_6504877_firmware:*:*:*:*:*:*:*:*
Range: <1.8001.0187
Crestron/Cp3n 6505417 Firmware
cpe:2.3:o:crestron:cp3n_6505417_firmware:*:*:*:*:*:*:*:*
Range: <1.8001.0187
Crestron/3-Series Control Systemsdescription
Crestron/3-Series Control Systemsllm-fuzzy
Range: <1.8001.0187

Patches

Vulnerability mechanics

References

1

www.crestron.com/release_notes/cp3n_1.8001.0187_release_notes.pdfnvdRelease Notes

News mentions

0

No linked articles in our index yet.