CVE-2018-10630

Name of the Vulnerable Software and Affected Versions Crestron TSW-X60 versions prior to 2.001.0037.001 Crestron MC3 versions prior to 1.502.0047.001

Description The devices are shipped with authentication disabled, and there is no indication to users that they need to take steps to enable it. When compromised, the access to the CTP console is left open.

Recommendations For Crestron TSW-X60 versions prior to 2.001.0037.001, enable authentication to secure the device. For Crestron MC3 versions prior to 1.502.0047.001, enable authentication to secure the device. As a temporary workaround, consider restricting access to the CTP console until authentication is enabled.