Add Crestron AM100 PIN Brute-forcing

Crestron AM100 devices are wireless presentation displays. They can be configured with a PIN to prevent access and hijacking a session. This auxiliary module brute-forces the PIN codes.
Honestly, the more I read it, more I feel like this module is "incomplete". I mean it's not very common to have a module which at the end needs to keep a connection open and wait for external operation. Which, on the other hand, is kinda hard to synchronize, as you already discovered by adding this "timeout" mechanism.

I guess you're doing it because the PIN will be regenerated on every connection, is it right? If it is the case, isn't there something to do with the PIN?. Obviously I'm a Creston devices ignorant. So not sure what can be done. Not sure if the PIN can be changed to kidnap the presentation. Or if any type of session logon can be automated once the PIN is guessed (to allow the module to establish a session I mean). 

Ideas are welcome, just providing my 5 cents.