CVE-2018-11229

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

5.63%

Published

Jun 7, 2018

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via command injection in Crestron Toolbox Protocol (CTP).

Weaknesses (CWE)

CWE-78

Affected Products (8)

crestron · crestron_toolbox_protocol_firmware (up to 2.001.0037.001)vulnerable

crestron · dmc-str

crestron · tsw-1060

crestron · tsw-1060-nc

crestron · tsw-560

crestron · tsw-560-nc

crestron · tsw-760

crestron · tsw-760-nc

References (6)

http://www.securityfocus.com/bid/105051

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-18-221-01

Third Party AdvisoryUS Government Resource

https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet

Vendor Advisory