Barco

Records41All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical11CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

Barco records in CISA KEV

TI-2019-02935 Crestron Multiple Products Command Injection Vulnerability CRITICAL 100KEV 2022-04-15

Components

Products in the NVD configurations · select one to filter the records

Clickshare Cse-200 Firmware 9 records MEDIUM Control Room Management Suite 9 records MEDIUM Wepresent Wipg-1600w Firmware 8 records CRITICAL Clickshare Cs-100 Firmware 6 records MEDIUM Clickshare Csc-1 Firmware 6 records MEDIUM Clickshare Cse-200+ Firmware 5 records MEDIUM Clickshare Cse-800 Firmware 5 records MEDIUM Clickshare Button R9861500d01 Firmware 4 records LOW

Records

41 records

TI-2019-02935 CVE-2019-3929 · GHSA-m297-v8rg-x5fh

Cross-site scripting in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT…

CRITICAL 100KEV

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98952 Published 2019-04-30 No fix listed CWE-79

TI-2026-65040 CVE-2026-100902 · GHSA-q2rq-5hf8-g6jh

Barco ClickShare CX-20 Gen2 Wallpaper Upload wallpaper improper validation of syntactic correctness of input

MEDIUM 64

A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00334 Published 2026-09-28 No fix listed CWE-1286

TI-2016-02639 CVE-2016-3149 · GHSA-mh8p-wwgw-w9wc

Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with…

MEDIUM 53

Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execute arbitrary code via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.07735 Published 2017-01-12 No fix listed

TI-2019-02936 CVE-2019-3930 · GHSA-xp69-2936-4v92

Stack-based buffer overflow in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq…

MEDIUM 52

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06957 Published 2019-04-30 No fix listed CWE-121

TI-2020-17184 CVE-2020-28334 · GHSA-ww7r-3h84-p2r6

Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2).

MEDIUM 50

Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04765 Published 2020-11-24 No fix listed CWE-798

TI-2022-09639 CVE-2022-26233 · GHSA-5pr7-2g53-345f

Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be…

MEDIUM 49

Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and components.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.15028 Published 2022-04-03 No fix listed CWE-22

TI-2020-13251 CVE-2020-17500 · GHSA-xq8c-cw49-4mwf

Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8…

MEDIUM 49

Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows Command Injection (issue 1 of 4).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04108 Published 2021-01-07 No fix listed CWE-77

TI-2019-13566 CVE-2019-18830 · GHSA-799q-v74x-hvrj

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection.

MEDIUM 49

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04337 Published 2019-12-16 No fix listed CWE-78

TI-2020-17183 CVE-2020-28333 · GHSA-c8j9-wpjx-gc58

Barco wePresent WiPG-1600W devices allow Authentication Bypass.

MEDIUM 48

Barco wePresent WiPG-1600W devices allow Authentication Bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03239 Published 2020-11-24 No fix listed CWE-200

TI-2016-02642 CVE-2016-3152 · GHSA-2wvv-6r6q-wwcj

Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to…

MEDIUM 47

Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware image.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02774 Published 2017-01-12 No fix listed CWE-200

TI-2020-17179 CVE-2020-28329 · GHSA-r54x-g9vf-56fv

Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is…

MEDIUM 45

Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01562 Published 2020-11-24 No fix listed CWE-798

TI-2017-06801 CVE-2017-9377 · GHSA-2pp4-6872-69xx

A command injection was identified on Barco ClickShare Base Unit devices with CSM-1…

MEDIUM 45

A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.04345 Published 2017-10-30 No fix listed CWE-78

TI-2020-17182 CVE-2020-28332 · GHSA-3j95-8976-jfmp

Barco wePresent WiPG-1600W devices download code without an Integrity Check.

MEDIUM 44

Barco wePresent WiPG-1600W devices download code without an Integrity Check.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01092 Published 2020-11-24 No fix listed CWE-494

TI-2019-13562 CVE-2019-18826 · GHSA-hwwp-f5jr-p8g6

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a…

MEDIUM 43

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate's Chain of Trust.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00678 Published 2019-12-16 No fix listed CWE-295

TI-2016-02641 CVE-2016-3151 · GHSA-qf7x-5whr-gj84

Directory traversal vulnerability in the wallpaper parsing functionality in Barco…

MEDIUM 40

Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware bef…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04276 Published 2017-01-12 No fix listed CWE-22

TI-2021-15822 CVE-2021-38142 · GHSA-pc5x-fvx9-jf5h

Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue…

LOW 39

Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00475 Published 2021-09-07 No fix listed CWE-319

TI-2020-13254 CVE-2020-17504 · GHSA-m596-2w5j-7vgh

The NDN-210 has a web administration panel which is made available over https.

LOW 37

The NDN-210 has a web administration panel which is made available over https.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02971 Published 2021-01-08 No fix listed CWE-77

TI-2020-13253 CVE-2020-17503 · GHSA-7xgg-9m2p-jqr2

The NDN-210 has a web administration panel which is made available over https.

LOW 37

The NDN-210 has a web administration panel which is made available over https.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02971 Published 2021-01-08 No fix listed CWE-77

TI-2020-13252 CVE-2020-17502 · GHSA-7wcx-h8gf-8fh3

Barco TransForm N before 3.8 allows Command Injection (issue 2 of 4).

LOW 37

Barco TransForm N before 3.8 allows Command Injection (issue 2 of 4).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02971 Published 2021-01-08 No fix listed CWE-77

TI-2020-17181 CVE-2020-28331 · GHSA-x6px-569j-4j5q

Barco wePresent WiPG-1600W devices have Improper Access Control.

LOW 36

Barco wePresent WiPG-1600W devices have Improper Access Control.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01694 Published 2020-11-24 No fix listed

TI-2019-13568 CVE-2019-18832 · GHSA-33hg-cqpj-624f

Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials…

LOW 36

Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00434 Published 2019-12-17 No fix listed CWE-327

TI-2022-10198 CVE-2022-26975 · GHSA-6fqv-mjhx-9v52

Barco Control Room Management Suite web application, which is part of TransForm N before…

LOW 35

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01028 Published 2022-06-01 No fix listed CWE-287

TI-2018-07754 CVE-2018-10943 · GHSA-g8mq-8x8h-9v5c

An issue was discovered on Barco ClickShare CSE-200 and CS-100 Base Units with firmware…

LOW 35

An issue was discovered on Barco ClickShare CSE-200 and CS-100 Base Units with firmware before 1.6.0.3.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01123 Published 2018-07-10 No fix listed CWE-20

TI-2021-14220 CVE-2021-35482 · GHSA-253w-3f25-wwwm

An issue was discovered in Barco MirrorOp Windows Sender before 2.5.4.70.

LOW 34

An issue was discovered in Barco MirrorOp Windows Sender before 2.5.4.70.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00441 Published 2021-07-21 No fix listed

TI-2019-13565 CVE-2019-18829 · GHSA-fr4v-rqcf-22f4

Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for…

LOW 34

Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00327 Published 2019-12-17 No fix listed CWE-345

Open these records in search →