Remote code execution

2018-06-0801:29:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.036 Low

EPSS

Percentile

91.7%

JSON

Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via a Bash shell service in Crestron Toolbox Protocol (CTP).

CPENameOperatorVersion
crestron_toolbox_protocol_firmwarelt2.001.0037.001

CPE	Name	Operator	Version
	crestron_toolbox_protocol_firmware	lt	2.001.0037.001

References

www.securityfocus.com/bid/105051

ics-cert.us-cert.gov/advisories/ICSA-18-221-01

support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet