Lucene search

K
zdiRicky "HeadlessZeke" LawshaeZDI-18-920
HistoryAug 14, 2018 - 12:00 a.m.

Crestron Multiple Products CTP Console Privilege Escalation Vulnerability

2018-08-1400:00:00
Ricky "HeadlessZeke" Lawshae
www.zerodayinitiative.com
13

EPSS

0.008

Percentile

81.3%

This vulnerability allows remote attackers to escalate privileges on affected installations of all Crestron products. Authentication is required to exploit this vulnerability. The specific flaw exists within the two built-in accounts on all Crestron devices. An attacker can leverage this vulnerability to execute arbitrary code under the context of Administrator.

EPSS

0.008

Percentile

81.3%

Related for ZDI-18-920