Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 use a hardcoded X.509 certificate from an OpenSSL Test Certification Authority, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.