Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication via a direct request to a page other than index.html.Referenceshttp://www.securityfocus.com/bid/92211http://www.kb.cert.org/vuls/id/974424
