{"schema":"threatline.record/2","record":{"id":"CVE-2019-3929","aliases":[],"summary":"Crestron Multiple Products Command Injection Vulnerability","details":"Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.","categories":["Unclassified"],"product":"Multiple Products","vendor":"Crestron","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2019-3929","source_modified_at":"2025-10-21T23:45:38.287Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4.","vendor":"Crestron","versions":[{"status":"affected","version":"Crestron AM-100 firmware 1.6.0.2"},{"status":"affected","version":"Crestron AM-101 firmware 2.7.0.1"},{"status":"affected","version":"Barco wePresent WiPG-1000P firmware 2.3.0.10"},{"status":"affected","version":"Barco wePresent WiPG-1600W before firmware 2.4.1.19"},{"status":"affected","version":"Extron ShareLink 200/250 firmware 2.0.3.4"},{"status":"affected","version":"Teq AV IT WIPS710 firmware 1.1.0.7"},{"status":"affected","version":"SHARP PN-L703WA firmware 1.4.2.3"},{"status":"affected","version":"Optoma WPS-Pro firmware 1.0.0.5"},{"status":"affected","version":"Blackbox HD WPS firmware 1.0.0.5"},{"status":"affected","version":"InFocus LiteShow3 firmware 1.0.16"},{"status":"affected","version":"and InFocus LiteShow4 2.0.0.7"}],"defaultStatus":null}],"fixed_versions":[],"cvss":9.8,"severity":"Critical","kev":{"listed":true,"date_added":"2022-04-15","due_date":"2022-05-06","required_action":"Apply updates per vendor instructions.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.98952,"percentile":0.9993,"score_date":"2026-10-23"},"published_at":"2019-04-30T20:21:09.000Z","modified_at":"2025-10-21T23:45:38.287Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2019-3929","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2025-10-21T23:45:38.287Z"},{"source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/wepresent_cmd_injection.rb","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2019-04-30"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/47924","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2020-01-15"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/46786","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2019-05-03"},{"source":"Nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3929.yaml","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":null},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2019-3929","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","Metasploit","Exploit-DB","Nuclei","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3929","source":"CISA KEV"},{"source":"CVE List","url":"https://www.tenable.com/security/research/tra-2019-20","tags":["x_refsource_MISC","x_transferred"]},{"source":"CVE List","url":"https://www.exploit-db.com/exploits/46786/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-3929","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CISA ADP","ssvc":{"exploitation":"active","automatable":"yes","technical_impact":"total","assessed_at":"2025-02-06T20:26:27.910638Z"},"exploits":[{"source":"Metasploit","kind":"Exploit module","name":"Barco WePresent file_transfer.cgi Command Injection","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/wepresent_cmd_injection.rb","date":"2019-04-30","added":"2026-04-22","check":true},{"source":"Exploit-DB","kind":"Remote exploit","name":"Barco WePresent - file_transfer.cgi Command Injection (Metasploit)","url":"https://www.exploit-db.com/exploits/47924","date":"2020-01-15","added":"2020-01-15","verified":true},{"source":"Exploit-DB","kind":"Webapps exploit","name":"Crestron AM/Barco wePresent WiPG/Extron ShareLink/Teq AV IT/SHARP PN-L703WA/Optoma WPS-Pro/Blackbox HD WPS/InFocus LiteShow - Remote Command Injection","url":"https://www.exploit-db.com/exploits/46786","date":"2019-05-03","added":"2019-05-03","verified":false},{"source":"Nuclei","kind":"Scanner template","name":"Barco/AWIND OEM Presentation Platform - Remote Command Injection","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3929.yaml"}],"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2025-10-21T23:45:38.287Z","content_hash":"711ad6ab17c9f81843146303159db5e4fcd2995a29f967309d51488b3f5065a2"}}