[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRdjH2LWob4QHehFppzDXqp06I2fNUM8ng-_FbENH1Zg":3,"g5a-risk:CVE-2016-5671":129},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":28,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":57,"references":58,"referencesCount":74,"weaknesses":75,"weaknessesCount":84,"isActivelyExploited":42,"cisaInfo":28,"otxData":28,"relatedBlogPosts":85,"seoMetadata":86,"configurations":111,"relatedVendorCves":125,"notableEvents":126},"CVE-2016-5671","What is CVE-2016-5671?","Multiple cross-site request forgery (CSRF) vulnerabilities on Crestron Electronics DM-TXRX-100-STR devices with firmware through 1.3039.00040 allow remote attackers to hijack the authentication of arbitrary users.","Multiple cross-site request forgery (CSRF) vulnerabilities on Crestron Electronics DM-TXRX-100-STR devices with firmware through 1.3039.00040 allow remote at...","2016-08-03T01:59:10.117","2026-06-17T00:49:50.827",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":31,"CVSSMetricV40":43},[],[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.0","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.8,5.9,[32],{"Source":18,"Type":19,"CVSSData":33,"BaseSeverity":36,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":42,"ObtainAllPrivilege":42,"ObtainUserPrivilege":42,"ObtainOtherPrivilege":42,"UserInteractionRequired":4},{"Version":34,"VectorString":35,"AccessVector":22,"AccessComplexity":36,"Authentication":24,"ConfidentialityImpact":37,"IntegrityImpact":37,"AvailabilityImpact":37,"BaseScore":38,"BaseSeverity":39,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,"",8.6,6.4,false,[],0.00861,[44,44,44,44,44,44,44],"High",[48,53],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"crestron","dm-txrx-100-str_firmware","*","cpe:2.3:o:crestron:dm-txrx-100-str_firmware:*:*:*:*:*:*:*:*",{"vendor":49,"product":54,"version":55,"criteria":56,"vulnerable":42},"dm-txrx-100-str","-","cpe:2.3:h:crestron:dm-txrx-100-str:-:*:*:*:*:*:*:*",2,[59,65,70,72],{"url":60,"source":61,"tags":62},"http:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F974424","Cert",[63,64],"Third Party Advisory","US Government Resource",{"url":66,"source":67,"tags":68},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F92211","Securityfocus",[63,69],"VDB Entry",{"url":60,"source":61,"tags":71},[63,64],{"url":66,"source":67,"tags":73},[63,69],4,[76],{"id":77,"name":78,"description":79,"extendedDescription":80,"status":81,"abstraction":82,"structure":83},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",1,[],{"title":87,"metaDescription":88,"keywords":89,"canonicalUrl":90,"structuredData":91},"What is CVE-2016-5671? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2016-5671, a high severity cyber security vulnerability from 2016. Multiple cross-site request forgery (CSRF) vulnerabilities o...","CVE-2016-5671, CVE-2016-5671 vulnerability, CVE-2016-5671 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, crestron security, dm-txrx-100-str_firmware vulnerability, dm-txrx-100-str vulnerability","\u002Fwhat-is\u002Fcve-2016-5671",{"@context":92,"@type":93,"headline":87,"description":88,"datePublished":10,"dateModified":11,"author":94,"publisher":98,"about":102,"mainEntityOfPage":106,"articleSection":109,"keywords":110},"https:\u002F\u002Fschema.org","TechArticle",{"@type":95,"name":96,"url":97},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":95,"name":96,"url":97,"logo":99},{"@type":100,"url":101},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":103,"name":6,"description":104,"additionalType":105},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":107,"@id":108},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2016-5671","Cybersecurity","CVE-2016-5671, CVE-2016-5671 vulnerability, CVE-2016-5671 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[112],{"Operator":113,"Negate":28,"Nodes":114},"AND",[115,121],{"Operator":116,"Negate":42,"CPEMatch":117},"OR",[118],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":119,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":120},"8826FA80-E1AF-46D2-B0C9-7B2BC240DE7A","1.2866.00026",{"Operator":116,"Negate":42,"CPEMatch":122},[123],{"Vulnerable":42,"Criteria":56,"MatchCriteriaID":124,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"D46F2C7B-856C-4AF2-ABC9-1E4CF7ED999C",[],[],{"lastModified":11,"cacheTime":128,"version":34},1793230909888,{"score":130,"band":131,"action":132,"scoredAt":133},47,"Medium","Plan remediation","2026-07-01T10:19:57.348792+00:00"]