CVE & CISA-KEV Catalog

CVE-2019-3930

CRITICALEPSS 93th pctl
9.8
CVSS v3
NVD

Description

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to a stack buffer overflow in libAwgCgi.so's PARSERtoCHAR function. A remote, unauthenticated attacker can use this vulnerability to execute arbitrary code as root via a crafted request to the return.cgi endpoint.

How to fix

Remediation Available
wepresent wipg-1600w firmwareNVD
Affected:< 2.4.1.19Fixed in:2.4.1.19CVE-2019-3930derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploit Intelligence

6.96%probability of exploitation in 30 days
93rdpercentile

High risk: more likely to be exploited than 93% of all known CVEs.

References

Exploit1

Related Vulnerabilities

Other CWE-121 (Stack-based Buffer Overflow) vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2025-22457Critical9.0100%KEV + RansomFix
CVE-2025-0282Critical9.0100%KEV + Ransom-
CVE-2021-20038Critical9.8100%KEV + Ransom-
CVE-2009-0927High8.897%KEVFix
CVE-2020-10924High8.887%--
CVE-2022-20705Critical10.080%--
Embed a live status badge for CVE-2019-3930
CVE-2019-3930 severity badge

Markdown

[![CVE-2019-3930](https://tridentstack.com/cve/badge/CVE-2019-3930.svg)](https://tridentstack.com/cve/CVE-2019-3930)

HTML

<a href="https://tridentstack.com/cve/CVE-2019-3930"><img src="https://tridentstack.com/cve/badge/CVE-2019-3930.svg" alt="CVE-2019-3930"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.