Crestron Touchscreens x70 Path Traversal Vulnerability

A relative path traversal vulnerability has been identified in Crestron Touchscreens x70, specifically in versions 3.000.0110.001 prior to 3.001.0031.001. This vulnerability allows improper limitation of a pathname to a restricted directory, potentially leading to unauthorized access or manipulation of files. The issue has been confirmed on TSW-760 and TSW-1060 models, with affected firmware version 3.002.1061.

Impact

Exploitation of this vulnerability could lead to unauthorized file access or manipulation, allowing for potential exploitation of the device or its functions.