Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 rely on the client to perform authentication, which allows remote attackers to obtain access by setting the value of objresp.authenabled to 1.Referenceshttp://www.securityfocus.com/bid/92211http://www.kb.cert.org/vuls/id/974424
