Crestron vendor intelligence

Crestron Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting Crestron products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Total KEVs
2
Known exploited vulnerabilities affecting Crestron products
In CISA KEV
1
Records also listed in the official catalog
Beyond CISA KEV
1
Additional exploited CVEs absent from CISA KEV
Sensor Observed
0
Crestron KEVs with sensor-observed exploitation activity

The catalog gap matters for Crestron exposure

One of the two exploited Crestron CVEs tracked here are not in CISA KEV. Teams relying on the official catalog alone would miss half of this vendor portfolio.

50%
Covered by CISA
50%
Beyond CISA
2
Product families

Attested Crestron CVEs

Search the exploited-vulnerability portfolio, then narrow it to official CISA coverage or the additional records KEV Intelligence tracks beyond the catalog.

How exploitation is verified
CVE / description Product Confidence CISA KEV Added
CVE-2022-23178

An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed...

HD-MD4X2-4K-E High Beyond CISA 16 Sep 2025
CVE-2019-3929

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W...

Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4. Confirmed In CISA 15 Apr 2022

Showing 2 of 2 Crestron known exploited vulnerabilities.

Recurring weakness patterns

Authentication, neutralization, and neutralization account for three mapped occurrences across this Crestron KEV portfolio.

Browse all KEVs →

Early warning alerts

Get alerts on high-impact exploitation

Receive curator-selected alerts when exploitation activity warrants attention. Each alert includes the evidence and context needed to decide what requires attention now.

Occasional high-impact alerts. Unsubscribe anytime. See our Privacy Policy.