Researchers
Back
Ricky “Headlesszeke” Lawshae
Researcher from
Trend Micro’s Zero Day Initiative
#33611
of 60,593
8.8
Total CVSS
Vulnerabilities
·
1
PT-2018-11766
2018-08-10
8.8
CVE-2018-13341
Crestron
Crestron Tsw-X60
The issue allows attackers to calculate passwords for special sudo accounts using information accessible to regular users. This could enable them to execute hidden API calls and escape the sandbox environment with elevated privileges.