Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication and change settings via a JSON API call.Referenceshttp://www.securityfocus.com/bid/92211http://www.kb.cert.org/vuls/id/974424
