CVE-2016-5666

CVE-2016-5666 affects Crestron DM-TXRX-100-STR devices with firmware older than 1.3039.00040. This critical vulnerability (CVSS 9.8) stems from the device's reliance on client-side authentication, allowing remote attackers to bypass security by manipulating an authentication flag. Successful exploitation grants full access to the device, leading to high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.