critical9.8
CVE-2018-11228
Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via a Ba…
Impact
Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via a Bash shell service in Crestron Toolbox Protocol (CTP).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Crestron | Crestron Toolbox Protocol Firmware | before 2.001.0037.001 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/105051
- https://ics-cert.us-cert.gov/advisories/ICSA-18-221-01
- https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet
- http://www.securityfocus.com/bid/105051
- https://ics-cert.us-cert.gov/advisories/ICSA-18-221-01
- https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet