Crestron Hd Md4X2 4K E vulnerabilities

1 vulnerability

Known vulnerabilities in Crestron Hd Md4X2 4K E, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2022-23178crestronhd-md4x2-4k-e_firmware
EPSS score
75.16%
An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interface. Specifically, aj.html sends a JSON document with uname and upassword fields.