SARA / Free Tools / KEV / CVE-2019-3929

CVE-2019-3929 on CISA KEV

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2

CISA KEV — Actively Exploited

Crestron Multiple Products Command Injection Vulnerability

Vendor / Product

— / Crestron / Multiple Products

Added to KEV

2022-04-15

BOD 22-01 due

2022-05-06

Ransomware use

Unknown

CVSS / EPSS

— — · EPSS 94.26%

01What CISA says about this vulnerability

02Required action — verbatim from CISA

Apply updates per vendor instructions.

03Notes & references

www.tenable.com — https://www.tenable.com/security/research/tra-2019-20
www.exploit-db.com — https://www.exploit-db.com/exploits/46786/
packetstormsecurity.com — http://packetstormsecurity.com/files/152715/Barco-AWIND-OEM-Presentation-Platfor…
packetstormsecurity.com — http://packetstormsecurity.com/files/155948/Barco-WePresent-file_transfer.cgi-Co…

04SARA's analyst layer — why this matters

This vulnerability is currently on the CISA KEV list, which CISA only adds CVEs to when there is reliable evidence of active exploitation in the wild. For federal civilian agencies, BOD 22-01 requires remediation by the due date above. For everyone else, KEV is the strongest "patch immediately" signal you can get from public threat intel.

05Affected products (summary)

Vendor	Product	Versions
Crestron	Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN	L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4. — Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7

06Detection

Open the Sigma generator with a pre-filled prompt for this CVE to draft a starting detection:

Open in Sigma generator →

Programmatic KEV data?
SARA's API returns KEV, CVSS, EPSS + analyst summary in one call.

Read the API reference →

Full CVE detail → Search KEV →