CVE-2018-11228 Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via a Bash shell service in Crestron Toolbox Prot...
CriticalCVSS 9.8
EPSS 7.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via a Bash shell service in Crestron Toolbox Protocol (CTP).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| crestron toolbox protocol firmware | < 2.001.0037.001 | 2.001.0037.001 |
References
- 105051 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- support.crestron.com vendor-advisory