CVE-2018-10630

9.8 criticalEPSS 11%

Critical (9.8) in crestron. EPSS 11% chance of exploitation in the next 30 days.

For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001, The devices are shipped with authentication disabled, and there is no indication to users that they need to take steps to enable it. When compromised, the access to the CTP console is left open.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 11% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWEs: CWE-287, CWE-284
Published: 2018-08-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

crestron:mc3_firmware
crestron:tsw-x60_firmware

References

http://www.securityfocus.com/bid/105051
https://ics-cert.us-cert.gov/advisories/ICSA-18-221-01
http://www.securityfocus.com/bid/105051
https://ics-cert.us-cert.gov/advisories/ICSA-18-221-01

Check your stack JSON