Barco

Records41All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical11CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

Barco records in CISA KEV

TI-2019-02935 Crestron Multiple Products Command Injection Vulnerability CRITICAL 100KEV 2022-04-15

Components

Products in the NVD configurations · select one to filter the records

Clickshare Cse-200 Firmware 9 records MEDIUM Control Room Management Suite 9 records MEDIUM Wepresent Wipg-1600w Firmware 8 records CRITICAL Clickshare Cs-100 Firmware 6 records MEDIUM Clickshare Csc-1 Firmware 6 records MEDIUM Clickshare Cse-200+ Firmware 5 records MEDIUM Clickshare Cse-800 Firmware 5 records MEDIUM Clickshare Button R9861500d01 Firmware 4 records LOW

Records

9 records in Clickshare Cse-200 Firmware · all components

TI-2019-13566 CVE-2019-18830 · GHSA-799q-v74x-hvrj

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection.

MEDIUM 49

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04337 Published 2019-12-16 No fix listed CWE-78

TI-2019-13562 CVE-2019-18826 · GHSA-hwwp-f5jr-p8g6

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a…

MEDIUM 43

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate's Chain of Trust.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00678 Published 2019-12-16 No fix listed CWE-295

TI-2016-02641 CVE-2016-3151 · GHSA-qf7x-5whr-gj84

Directory traversal vulnerability in the wallpaper parsing functionality in Barco…

MEDIUM 40

Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware bef…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04276 Published 2017-01-12 No fix listed CWE-22

TI-2018-07754 CVE-2018-10943 · GHSA-g8mq-8x8h-9v5c

An issue was discovered on Barco ClickShare CSE-200 and CS-100 Base Units with firmware…

LOW 35

An issue was discovered on Barco ClickShare CSE-200 and CS-100 Base Units with firmware before 1.6.0.3.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01123 Published 2018-07-10 No fix listed CWE-20

TI-2019-13561 CVE-2019-18825 · GHSA-fvrj-qh22-gh9g

Barco ClickShare Huddle CS-100 devices before 1.9.0 and CSE-200 devices before 1.9.0 have…

LOW 34

Barco ClickShare Huddle CS-100 devices before 1.9.0 and CSE-200 devices before 1.9.0 have incorrect Credentials Management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00603 Published 2019-12-17 No fix listed

TI-2019-13564 CVE-2019-18828 · GHSA-jc84-mppv-r94j

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected…

LOW 30

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00393 Published 2019-12-16 No fix listed CWE-521

TI-2016-02640 CVE-2016-3150 · GHSA-f5fp-r73r-m33f

Cross-site scripting (XSS) vulnerability in wallpaper.php in the Base Unit in Barco…

LOW 30

Cross-site scripting (XSS) vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware b…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01261 Published 2017-01-12 No fix listed CWE-79

TI-2019-13563 CVE-2019-18827 · GHSA-56mr-9636-w954

On Barco ClickShare Button R9861500D01 devices (before firmware version 1.9.0) JTAG…

LOW 29

On Barco ClickShare Button R9861500D01 devices (before firmware version 1.9.0) JTAG access is disabled after ROM code execution.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01353 Published 2019-12-16 No fix listed CWE-285

TI-2019-13567 CVE-2019-18831 · GHSA-pg3j-494f-xx35

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information Exposure.

LOW 25

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information Exposure.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00566 Published 2019-12-16 No fix listed CWE-798

Open these records in search →