CVE-2018-11228 | BDVDB-2026-102111 Detail

Description#

Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via a Bash shell service in Crestron Toolbox Protocol (CTP).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/105051
https://ics-cert.us-cert.gov/advisories/ICSA-18-221-01
https://support.crestron.com/app/answers/answer_view/a_id/5471/~/the-latest-details-from-crestron-on-security-and-safety-on-the-internet

Exploit#

No public exploit known

History#

Version 12018-06-08Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.