CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
92.3%
Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via command injection in Crestron Toolbox Protocol (CTP).
Vendor | Product | Version | CPE |
---|---|---|---|
crestron | crestron_toolbox_protocol_firmware | * | cpe:2.3:o:crestron:crestron_toolbox_protocol_firmware:*:*:*:*:*:*:*:* |
crestron | dmc-str | - | cpe:2.3:h:crestron:dmc-str:-:*:*:*:*:*:*:* |
crestron | tsw-1060 | - | cpe:2.3:h:crestron:tsw-1060:-:*:*:*:*:*:*:* |
crestron | tsw-1060-nc | - | cpe:2.3:h:crestron:tsw-1060-nc:-:*:*:*:*:*:*:* |
crestron | tsw-560 | - | cpe:2.3:h:crestron:tsw-560:-:*:*:*:*:*:*:* |
crestron | tsw-560-nc | - | cpe:2.3:h:crestron:tsw-560-nc:-:*:*:*:*:*:*:* |
crestron | tsw-760 | - | cpe:2.3:h:crestron:tsw-760:-:*:*:*:*:*:*:* |
crestron | tsw-760-nc | - | cpe:2.3:h:crestron:tsw-760-nc:-:*:*:*:*:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
92.3%