PT-2018-11766
CVE-2018-13341
·
تاريخ النشر
2018-08-10
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Crestron TSW-X60 versions prior to 2.001.0037.001
Crestron MC3 versions prior to 1.502.0047.00
Description
The issue allows attackers to calculate passwords for special sudo accounts using information accessible to regular users. This could enable them to execute hidden API calls and escape the sandbox environment with elevated privileges.
Recommendations
For Crestron TSW-X60 versions prior to 2.001.0037.001, update to version 2.001.0037.001 or later.
For Crestron MC3 versions prior to 1.502.0047.00, update to version 1.502.0047.00 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾