NetSight
high7.5

CVE-2023-38405

On Crestron 3-Series Control Systems before 1.8001.0187, crafting and sending a specific BACnet packet can cause a crash.

Impact

On Crestron 3-Series Control Systems before 1.8001.0187, crafting and sending a specific BACnet packet can cause a crash.

Affected products

VendorProductAffected versions
CrestronCp3n 6505417 Firmware
before 1.8001.0187
CrestronCp3 6504877 Firmware
before 1.8001.0187
CrestronCp3-Gv 6506034 Firmware
before 1.8001.0187

Weakness classification

References