CVE-2016-5667

CVE-2016-5667 describes an authentication bypass vulnerability in Crestron DM-TXRX-100-STR devices running firmware prior to version 1.3039.00040, allowing remote attackers to gain unauthorized access by directly requesting pages other than index.html. This critical vulnerability, with a CVSS score of 9.8, requires no user interaction or prior authentication, enabling full compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed on the CISA KEV catalog.