Remote code execution

Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via a Bash shell service in Crestron Toolbox Protocol CTP...

CVE-2018-11228

CVE-2018-11228 affects Crestron TSW-1060/760/560 and TSW-1060-NC/760-NC/560-NC devices pre-2.001.0037.001, where an unauthenticated remote code execution is possible via a Bash shell service in the Crestron Toolbox Protocol (CTP). Connected advisories describe similar CTP console command injectio...

CVE-2018-11228

Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via a Bash shell service in Crestron Toolbox Protocol CTP...

CVE-2018-11228: Improper Control of Generation of Code

Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via a Bash shell service in Crestron Toolbox Protocol CTP...

CVE-2017-16203

The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16204

The jquey module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16205

The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16205

The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

Information disclosure

The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16206

The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16203

The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16202

The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

PT-2018-6230

Name of the Vulnerable Software and Affected Versions: coffe-script versions affected versions not specified Description: The coffe-script module exfiltrates sensitive data, including a user's private SSH key and bash history, to a third-party server during installation. This module is considered...

PT-2018-6233

Name of the Vulnerable Software and Affected Versions: cofee-script versions all Description: The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation. It is a piece of malware that steals sensitive data,...

PT-2018-6231

Name of the Vulnerable Software and Affected Versions: jquey versions affected versions not specified Description: The jquey module is malware that attempts to discover and exfiltrate sensitive data, including a user's private SSH key and bash history, sending them to attacker-controlled location...

CVE-2017-16206: Exposure of Sensitive Information to an Unauthorized Actor

The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16203: Embedded Malicious Code

The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

CVE-2017-16204: Embedded Malicious Code

The jquey module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

PT-2018-6232

Name of the Vulnerable Software and Affected Versions: coffescript versions affected versions not specified Description: The coffescript module exfiltrates sensitive data, including a user's private SSH key and bash history, to a third-party server during installation. This module is considered...

CVE-2017-16205: Embedded Malicious Code

The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...