CVE-2018-13341

8.8 highEPSS 3.7%

High (8.8) in crestron. EPSS 3.7% chance of exploitation in the next 30 days.

Crestron TSW-X60 all versions prior to 2.001.0037.001 and MC3 all versions prior to 1.502.0047.00, The passwords for special sudo accounts may be calculated using information accessible to those with regular user privileges. Attackers could decipher these passwords, which may allow them to execute hidden API calls and escape the CTP console sandbox environment with elevated privileges.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.7% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
Published: 2018-08-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

crestron:mc3_firmware
crestron:tsw-x60_firmware

References

http://www.securityfocus.com/bid/105051
https://ics-cert.us-cert.gov/advisories/ICSA-18-221-01
http://www.securityfocus.com/bid/105051
https://ics-cert.us-cert.gov/advisories/ICSA-18-221-01

Check your stack JSON