PT-2018-10016
CVE-2018-10630
·
تاريخ النشر
2018-08-10
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Crestron TSW-X60 versions prior to 2.001.0037.001
Crestron MC3 versions prior to 1.502.0047.001
Description
The devices are shipped with authentication disabled, and there is no indication to users that they need to take steps to enable it. When compromised, the access to the CTP console is left open.
Recommendations
For Crestron TSW-X60 versions prior to 2.001.0037.001, enable authentication to secure the device.
For Crestron MC3 versions prior to 1.502.0047.001, enable authentication to secure the device.
As a temporary workaround, consider restricting access to the CTP console until authentication is enabled.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾