[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOoo4JszWBqDPRFAA2NUWAVP9SJNgBNKkSmvfh_3NfBo":3,"g5a-risk:CVE-2018-10630":199},{"success":4,"data":5,"meta":197},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":15,"epssTimeSeries":38,"severity":40,"affectedProducts":41,"affectedProductsCount":90,"references":91,"referencesCount":104,"weaknesses":105,"weaknessesCount":104,"isActivelyExploited":121,"cisaInfo":15,"otxData":15,"relatedBlogPosts":122,"seoMetadata":123,"configurations":148,"relatedVendorCves":195,"notableEvents":196},"CVE-2018-10630","What is CVE-2018-10630?","For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001, The devices are shipped with authentication disabled, and there is no indication to users that they need to take steps to enable it. When compromised, the access to the CTP console is left open.","For Crestron TSW-X60 version prior to 2.001.0037.001 and MC3 version prior to 1.502.0047.001, The devices are shipped with authentication disabled, and there...","2018-08-10T19:29:00.24","2019-10-09T23:32:57.383",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":36,"ACInsufInfo":4,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",10,0.10511,[39,39,39,39,37,37,37],0.10912,"Critical",[42,47,51,54,57,60,63,66,69,72,75,78,81,84,87],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"crestron","tsw-x60_firmware","*","cpe:2.3:o:crestron:tsw-x60_firmware:*:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":49,"criteria":50,"vulnerable":4},"tsw-1060-b-s","-","cpe:2.3:h:crestron:tsw-1060-b-s:-:*:*:*:*:*:*:*",{"vendor":43,"product":52,"version":49,"criteria":53,"vulnerable":4},"tsw-1060-nc-b-s","cpe:2.3:h:crestron:tsw-1060-nc-b-s:-:*:*:*:*:*:*:*",{"vendor":43,"product":55,"version":49,"criteria":56,"vulnerable":4},"tsw-1060-nc-w-s","cpe:2.3:h:crestron:tsw-1060-nc-w-s:-:*:*:*:*:*:*:*",{"vendor":43,"product":58,"version":49,"criteria":59,"vulnerable":4},"tsw-1060-w-s","cpe:2.3:h:crestron:tsw-1060-w-s:-:*:*:*:*:*:*:*",{"vendor":43,"product":61,"version":49,"criteria":62,"vulnerable":4},"tsw-560-b-s","cpe:2.3:h:crestron:tsw-560-b-s:-:*:*:*:*:*:*:*",{"vendor":43,"product":64,"version":49,"criteria":65,"vulnerable":4},"tsw-560-nc-b-s","cpe:2.3:h:crestron:tsw-560-nc-b-s:-:*:*:*:*:*:*:*",{"vendor":43,"product":67,"version":49,"criteria":68,"vulnerable":4},"tsw-560-nc-w-s","cpe:2.3:h:crestron:tsw-560-nc-w-s:-:*:*:*:*:*:*:*",{"vendor":43,"product":70,"version":49,"criteria":71,"vulnerable":4},"tsw-560-w-s","cpe:2.3:h:crestron:tsw-560-w-s:-:*:*:*:*:*:*:*",{"vendor":43,"product":73,"version":49,"criteria":74,"vulnerable":4},"tsw-760-b-s","cpe:2.3:h:crestron:tsw-760-b-s:-:*:*:*:*:*:*:*",{"vendor":43,"product":76,"version":49,"criteria":77,"vulnerable":4},"tsw-760-nc-b-s","cpe:2.3:h:crestron:tsw-760-nc-b-s:-:*:*:*:*:*:*:*",{"vendor":43,"product":79,"version":49,"criteria":80,"vulnerable":4},"tsw-760-nc-w-s","cpe:2.3:h:crestron:tsw-760-nc-w-s:-:*:*:*:*:*:*:*",{"vendor":43,"product":82,"version":49,"criteria":83,"vulnerable":4},"tsw-760-w-s","cpe:2.3:h:crestron:tsw-760-w-s:-:*:*:*:*:*:*:*",{"vendor":43,"product":85,"version":45,"criteria":86,"vulnerable":4},"mc3_firmware","cpe:2.3:o:crestron:mc3_firmware:*:*:*:*:*:*:*:*",{"vendor":43,"product":88,"version":49,"criteria":89,"vulnerable":4},"mc3","cpe:2.3:h:crestron:mc3:-:*:*:*:*:*:*:*",15,[92,98],{"url":93,"source":94,"tags":95},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F105051","Securityfocus",[96,97],"Third Party Advisory","VDB Entry",{"url":99,"source":100,"tags":101},"https:\u002F\u002Fics-cert.us-cert.gov\u002Fadvisories\u002FICSA-18-221-01","Us-cert",[102,96,103],"Patch","US Government Resource",2,[106,114],{"id":107,"name":108,"description":109,"extendedDescription":110,"status":111,"abstraction":112,"structure":113},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",{"id":115,"name":116,"description":117,"extendedDescription":118,"status":119,"abstraction":120,"structure":113},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar",false,[],{"title":124,"metaDescription":125,"keywords":126,"canonicalUrl":127,"structuredData":128},"What is CVE-2018-10630? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-10630, a critical severity cyber security vulnerability from 2018. For Crestron TSW-X60 version prior to 2.001.0037.001 an...","CVE-2018-10630, CVE-2018-10630 vulnerability, CVE-2018-10630 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, crestron security, tsw-x60_firmware vulnerability, tsw-1060-b-s vulnerability, tsw-1060-nc-b-s vulnerability, tsw-1060-nc-w-s vulnerability, tsw-1060-w-s vulnerability","\u002Fwhat-is\u002Fcve-2018-10630",{"@context":129,"@type":130,"headline":124,"description":125,"datePublished":10,"dateModified":11,"author":131,"publisher":135,"about":139,"mainEntityOfPage":143,"articleSection":146,"keywords":147},"https:\u002F\u002Fschema.org","TechArticle",{"@type":132,"name":133,"url":134},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":132,"name":133,"url":134,"logo":136},{"@type":137,"url":138},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":140,"name":6,"description":141,"additionalType":142},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":144,"@id":145},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-10630","Cybersecurity","CVE-2018-10630, CVE-2018-10630 vulnerability, CVE-2018-10630 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[149,184],{"Operator":150,"Negate":15,"Nodes":151},"AND",[152,158],{"Operator":153,"Negate":15,"CPEMatch":154},"OR",[155],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":156,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":157,"VersionEndIncluding":15},"B0C26C6C-4F6D-4084-AA36-CDBBF5B182F0","2.001.0037.001",{"Operator":153,"Negate":15,"CPEMatch":159},[160,162,164,166,168,170,172,174,176,178,180,182],{"Vulnerable":15,"Criteria":50,"MatchCriteriaID":161,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5B827C62-5712-4511-8506-74B925DA053B",{"Vulnerable":15,"Criteria":53,"MatchCriteriaID":163,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D41EF7B1-8F7A-4F66-B9B1-90405F507FE8",{"Vulnerable":15,"Criteria":56,"MatchCriteriaID":165,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"28A41D87-44CE-452D-A696-5DFCAEFF3D4C",{"Vulnerable":15,"Criteria":59,"MatchCriteriaID":167,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"BCAC6D4C-51C5-4687-B9F5-8B3FD9F4503E",{"Vulnerable":15,"Criteria":62,"MatchCriteriaID":169,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A7B4BBE9-C4D1-42C1-AD23-3F47D2E7BCD4",{"Vulnerable":15,"Criteria":65,"MatchCriteriaID":171,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"621667FD-7FC9-4606-857B-2423EAEF613A",{"Vulnerable":15,"Criteria":68,"MatchCriteriaID":173,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"30C58417-CA62-4E68-8421-A968406F4797",{"Vulnerable":15,"Criteria":71,"MatchCriteriaID":175,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5A888FB2-6F71-4D45-9E03-505DAD49909A",{"Vulnerable":15,"Criteria":74,"MatchCriteriaID":177,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"01970CD6-3FE7-42BF-A2BB-358692F8B787",{"Vulnerable":15,"Criteria":77,"MatchCriteriaID":179,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"507A0431-6EB0-4535-AD17-97C09542AB6E",{"Vulnerable":15,"Criteria":80,"MatchCriteriaID":181,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B084CEC7-E1B0-44F1-AAAB-CEC86EA767AF",{"Vulnerable":15,"Criteria":83,"MatchCriteriaID":183,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5FBE392B-4A2B-4B7E-9F1D-6E55FCE0146C",{"Operator":150,"Negate":15,"Nodes":185},[186,191],{"Operator":153,"Negate":15,"CPEMatch":187},[188],{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":189,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":190,"VersionEndIncluding":15},"B16FD3DA-6249-4252-A76A-E3BDDD37E849","1.502.0047.001",{"Operator":153,"Negate":15,"CPEMatch":192},[193],{"Vulnerable":15,"Criteria":89,"MatchCriteriaID":194,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3E648452-F573-478D-9A32-1D76534926D4",[],[],{"lastModified":11,"cacheTime":198,"version":33},1792372547224,{"score":200,"band":201,"action":202,"scoredAt":203},55,"Medium","Plan remediation","2026-10-16T06:44:42.946027+00:00"]