Command injection in Crestron Electronics products - CVE-2018-11229

Vulnerability identifier: #VU14301

CSH Severity: Low

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-11229

CWE-ID: CWE-77

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary commands on the target system.

The vulnerability exists due to command injection in Crestron Toolbox Protocol (CTP). A remote unauthenticated attacker can submit a specially crafted input and execute arbitrary code with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

TSW-560-NC
TSW-760-NC
TSW-1060-NC
TSW-560
TSW-760
TSW-1060
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Opensuse

Update the affected software to version 2.001.0037.001.

TSW-560-NC - update to 2.001.0037.001
TSW-760-NC - update to 2.001.0037.001
TSW-1060-NC - update to 2.001.0037.001
TSW-560 - update to 2.001.0037.001
TSW-760 - update to 2.001.0037.001
TSW-1060 - update to 2.001.0037.001

• https://ics-cert.us-cert.gov/advisories/ICSA-18-221-01

• Multiple vulnerabilities in Crestron TSW-X60 and MC3
• Red Hat update for procps-ng
• OpenSUSE Linux update for procps
• OpenSUSE Linux update for procps