Improper access control in Crestron Electronics products - CVE-2018-10630

Vulnerability identifier: #VU14302

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-10630

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass security restrictions on the target system.

The vulnerability exists due to the devices are shipped with authentication disabled, and there is no indication to users that they need to take steps to enable it. A remote unauthenticated attacker can bypass security restrictions and gain access to the CTP console.

TSW-560-NC
TSW-760-NC
TSW-1060-NC
TSW-560
TSW-760
TSW-1060
MC3

Update TSW-X60 to version 2.001.0037.001.
Update MC3 to version 1.502.0047.001.

TSW-560-NC - update to 2.001.0037.001
TSW-760-NC - update to 2.001.0037.001
TSW-1060-NC - update to 2.001.0037.001
TSW-560 - update to 2.001.0037.001
TSW-760 - update to 2.001.0037.001
TSW-1060 - update to 2.001.0037.001
MC3 - update to 1.502.0047.001

• https://ics-cert.us-cert.gov/advisories/ICSA-18-221-01

• Multiple vulnerabilities in Crestron TSW-X60 and MC3