Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-10630

For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001, The devices are shipped with authentication disabled, and there is no indication to us

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001, The devices are shipped with authentication disabled, and there is no indication to users that they need to take steps to enable it. When compromised, the access to the CTP console is left open.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ICS-CERT Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001

  • Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001affected

References