ID:5272 - Exploit for Security restrictions bypass in Crestron Electronics products - CVE-2018-13341

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to bypass security restrictions on the target system.

The vulnerability exists due to the passwords for special sudo accounts may be calculated using information accessible to those with regular user privileges. A remote unauthenticated attacker can decipher these passwords, execute hidden API calls and escape the CTP console sandbox environment with elevated privileges.

Remediation