CVE-2018-13341 - CVE House
Back to Database
Status published High CVE-2018-13341

Crestron TSW-X60 all versions prior to 2.001.0037.001 and MC3 all...

Vulnerability Description

Crestron TSW-X60 all versions prior to 2.001.0037.001 and MC3 all versions prior to 1.502.0047.00, The passwords for special sudo accounts may be calculated using information accessible to those with regular user privileges. Attackers could decipher these passwords, which may allow them to execute hidden API calls and escape the CTP console sandbox environment with elevated privileges.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-13341

Credits & Attribution

No credits recorded in the NVD database.

References

More from crestron

View All →
CVE-2022-40298
Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions,...
Unknown 0
CVE-2022-34102
Insufficient access control vulnerability was discovered in the Crestron AirMedia...
High 8.8
CVE-2022-34101
A vulnerability was discovered in the Crestron AirMedia Windows Application,...
High 7.8
CVE-2022-34100
A vulnerability was discovered in the Crestron AirMedia Windows Application,...
High 8.8
CVE-2022-23178
An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When...
Critical 9.8

Affected Vendor

Affected Software

tsw-x60 firmware, mc3 firmware
Vulnerable Versions:
0

Timeline

Official Publish: August 10th, 2018
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.