Summary
Successful exploitation of these vulnerabilities may allow remote code execution with escalated system privileges.
Vulnerabilities 4
-
Unscored —CVE-2018-10630 EPSS 11%
For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001, The devices are shipped w…
-
Unscored —
Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauth…
-
Unscored —
Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauth…
-
Unscored —CVE-2018-13341 Public exploit
Crestron TSW-X60 all versions prior to 2.001.0037.001 and MC3 all versions prior to 1.502.0047.00, The passwords for sp…
Revision history
-
#1
ICSA-18-221-01 Crestron TSW-X60 and MC3
References
-
ICS Advisory ICSA-18-221-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-221-01
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B