🔴

CISA Known Exploited Vulnerability

This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.

CVE

CVE-2019-3929

9.8

CVSScritical

Exploitable remotely over the internet · no authentication required.

Description

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

crestron airmedia, barco wepresent, extron sharelink, teq av it wips710, sharp pn-l703wa, optoma wps-pro, blackbox hd wps, infocus liteshow3, and infocus liteshow4.

Updated Oct 23, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

CVE-2019-3929 Scanner

CVE-2019-3929 scanner - OS Command Injection vulnerability in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4

Used 2k times · 3.4k assets checked · url

Scanner page →Run scanner

CVE history: crestron airmedia, barco wepresent, extron sharelink, teq av it wips710, sharp pn-l703wa, optoma wps-pro, blackbox hd wps, infocus liteshow3, and infocus liteshow4.

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →