How severe is CVE-2018-13341?

CVE-2018-13341 has a CVSS 3.x base score of 8.8, rated high severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2018-13341 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (88th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2018-13341?

CVE-2018-13341 primarily affects Crestron Tsw-x60 Firmware. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2018-13341?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2018-13341 published?

CVE-2018-13341 was published on 2018-08-10 and last updated on 2026-06-17.

CVE-2018-13341

CVE-2018-13341 is a high-severity vulnerability in Crestron Tsw-x60 Firmware with a CVSS 3.x base score of 8.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 3.x base score 8.8)
CVSS v2: 4.0
EPSS exploit prediction: 4% (88th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Crestron Tsw-x60 Firmware
Published: 2018-08-10
Last modified: 2026-06-17

Description

Crestron TSW-X60 all versions prior to 2.001.0037.001 and MC3 all versions prior to 1.502.0047.00, The passwords for special sudo accounts may be calculated using information accessible to those with regular user privileges. Attackers could decipher these passwords, which may allow them to execute hidden API calls and escape the CTP console sandbox environment with elevated privileges.

Frequently asked questions

What is CVE-2018-13341?: Crestron TSW-X60 all versions prior to 2.001.0037.001 and MC3 all versions prior to 1.502.0047.00, The passwords for special sudo accounts may be calculated using information accessible to those with regular user privileges. Attackers could decipher these passwords, which may allow them to execute hidden API calls and escape the CTP console sandbox environment with elevated privileges.
How severe is CVE-2018-13341?: CVE-2018-13341 has a CVSS 3.x base score of 8.8, rated high severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2018-13341 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (88th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2018-13341?: CVE-2018-13341 primarily affects Crestron Tsw-x60 Firmware. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2018-13341?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2018-13341 published?: CVE-2018-13341 was published on 2018-08-10 and last updated on 2026-06-17.

References

Affected products (2)

cpe:2.3:o:crestron:tsw-x60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:crestron:mc3_firmware:*:*:*:*:*:*:*:*

More vulnerabilities in Crestron Tsw-x60 Firmware

CVE-2018-10630 — Critical (CVSS 9.8): For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001, The devices are shipped…

All CVEs affecting Crestron Tsw-x60 Firmware →