CVE-2018-10630

N/A

Published: August 10, 2018 at 07:00 PM UTC

Updated: June 17, 2026 at 01:34 AM UTC

17 products affected across 2 vendorsTsw X60 FirmwareMC3 FirmwareTsw-560-B-S

Using Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001 by ICS-CERT?

Get instant alerts when new vulnerabilities affect Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 11%

Description

For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001, The devices are shipped with authentication disabled, and there is no indication to users that they need to take steps to enable it. When compromised, the access to the CTP console is left open.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

MC3 Firmware · Crestron

95%

v < 1.502.0047.001

Affected range stops below 1.502.0047.001, so it looks safe — our inference, not a vendor statement

crestron-mc3 (same device)

Tsw X60 Firmware · Crestron

95%

v < 2.001.0037.001

Affected range stops below 2.001.0037.001, so it looks safe — our inference, not a vendor statement

crestron-tsw-1060-b-s (environment) · crestron-tsw-1060-nc-b-s (environment) · crestron-tsw-1060-nc-w-s (environment) · crestron-tsw-1060-w-s (environment) · crestron-tsw-560-b-s (environment) · crestron-tsw-560-nc-b-s (environment) · crestron-tsw-560-nc-w-s (environment) · crestron-tsw-560-w-s (environment) · crestron-tsw-760-b-s (environment) · crestron-tsw-760-nc-b-s (environment) · crestron-tsw-760-nc-w-s (environment) · crestron-tsw-760-w-s (environment)

Crestron MC3 · ICS Cert

50%

All versions

Crestron TSW-X60 · ICS Cert

50%

All versions

Mc3 · Crestrondevice

80%

All versions

Tsw-1060-B-S · Crestrondevice

80%

All versions