Security restrictions bypass in Crestron Electronics products - CVE-2018-13341
Published: August 10, 2018 / Updated: April 6, 2021
Vulnerability identifier: #VU14303
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-13341
CWE-ID: CWE-522
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a remote attacker to bypass security restrictions on the target system.
The vulnerability exists due to the passwords for special sudo accounts may be calculated using information accessible to those with regular user privileges. A remote unauthenticated attacker can decipher these passwords, execute hidden API calls and escape the CTP console sandbox environment with elevated privileges.
Affected software
TSW-560-NC
TSW-760-NC
TSW-1060-NC
TSW-560
TSW-760
TSW-1060
MC3
TSW-760-NC
TSW-1060-NC
TSW-560
TSW-760
TSW-1060
MC3
How to mitigate CVE-2018-13341
Update TSW-X60 to version 2.001.0037.001.
Update MC3 to version 1.502.0047.001.
Update MC3 to version 1.502.0047.001.
TSW-560-NC - update to 2.001.0037.001
TSW-760-NC - update to 2.001.0037.001
TSW-1060-NC - update to 2.001.0037.001
TSW-560 - update to 2.001.0037.001
TSW-760 - update to 2.001.0037.001
TSW-1060 - update to 2.001.0037.001
MC3 - update to 1.502.0047.001
TSW-760-NC - update to 2.001.0037.001
TSW-1060-NC - update to 2.001.0037.001
TSW-560 - update to 2.001.0037.001
TSW-760 - update to 2.001.0037.001
TSW-1060 - update to 2.001.0037.001
MC3 - update to 1.502.0047.001