Lucene search
PRIOn knowledge basePRION:CVE-2018-13341HistoryAug 10, 2018 - 7:29 p.m.
Code injection
2018-08-1019:29:00
PRIOn knowledge base
www.prio-n.com
2
Crestron TSW-X60 all versions prior to 2.001.0037.001 and MC3 all versions prior to 1.502.0047.00, The passwords for special sudo accounts may be calculated using information accessible to those with regular user privileges. Attackers could decipher these passwords, which may allow them to execute hidden API calls and escape the CTP console sandbox environment with elevated privileges.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mc3_firmware | lt | 1.502.0047.00 | |
| tsw-x60_firmware | lt | 2.001.0037.001 |
Related
cvelist
cvelist
CVE-2018-13341
2018-08-09 00:00:00
cve
cve
CVE-2018-13341
2018-08-10 19:29:00
zdi
zdi
Crestron Multiple Products CTP Console Privilege Escalation Vulnerability
2018-08-14 00:00:00
nvd
nvd
CVE-2018-13341
2018-08-10 19:29:00
ics
ics
Crestron TSW-X60 and MC3
2018-08-21 12:00:00