OS command injection in Crestron Electronics products - CVE-2018-11228
Published: August 9, 2018 / Updated: August 10, 2018
Vulnerability identifier: #VU14300
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-11228
CWE-ID: CWE-78
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.
The vulnerability exists due to insufficient validation of user-supplied input. A remote unauthenticated attacker can submit a specially crafted input via a Bash shell service in Crestron Toolbox Protocol (CTP) and execute arbitrary code with elevated privileges.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
TSW-560-NC
TSW-760-NC
TSW-1060-NC
TSW-560
TSW-760
TSW-1060
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Opensuse
TSW-760-NC
TSW-1060-NC
TSW-560
TSW-760
TSW-1060
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Opensuse
How to mitigate CVE-2018-11228
Update the affected software to version 2.001.0037.001.
TSW-560-NC - update to 2.001.0037.001
TSW-760-NC - update to 2.001.0037.001
TSW-1060-NC - update to 2.001.0037.001
TSW-560 - update to 2.001.0037.001
TSW-760 - update to 2.001.0037.001
TSW-1060 - update to 2.001.0037.001
TSW-760-NC - update to 2.001.0037.001
TSW-1060-NC - update to 2.001.0037.001
TSW-560 - update to 2.001.0037.001
TSW-760 - update to 2.001.0037.001
TSW-1060 - update to 2.001.0037.001