cve/2018/CVE-2018-11228.md

### [CVE-2018-11228](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11228)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via a Bash shell service in Crestron Toolbox Protocol (CTP).

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/Rajchowdhury420/CVE-2018-13341
- https://github.com/axcheron/crestron_getsudopwd
- https://github.com/mi-hood/CVE-2018-9206
- https://github.com/roninAPT/CVE-2018-0802