crestron_getsudopwd

crestrongetsudopwd Based on Ricky Lawshae discovery on Crestron TSW-X60 and MC3 devices, this tool aims to exploit the CVE-2018-13341. Using the MAC address of the targeted device, you can recover the password of the "crengsuperuser" hidden account which has elevated privileges and allow you to r...

CVE-2018-13341

CVE-2018-13341 affects Crestron TSW-X60 (pre-2.001.0037.001) and MC3 (pre-1.502.0047.001). Root cause: insufficiently protected credentials allowing password derivation for special sudo accounts from information accessible to regular users, enabling hidden API calls and escape from the CTP consol...