Barco

Records41All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical11CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

Barco records in CISA KEV

TI-2019-02935 Crestron Multiple Products Command Injection Vulnerability CRITICAL 100KEV 2022-04-15

Components

Products in the NVD configurations · select one to filter the records

Clickshare Cse-200 Firmware 9 records MEDIUM Control Room Management Suite 9 records MEDIUM Wepresent Wipg-1600w Firmware 8 records CRITICAL Clickshare Cs-100 Firmware 6 records MEDIUM Clickshare Csc-1 Firmware 6 records MEDIUM Clickshare Cse-200+ Firmware 5 records MEDIUM Clickshare Cse-800 Firmware 5 records MEDIUM Clickshare Button R9861500d01 Firmware 4 records LOW

Records

8 records in Wepresent Wipg-1600w Firmware · all components

TI-2019-02935 CVE-2019-3929 · GHSA-m297-v8rg-x5fh

Cross-site scripting in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT…

CRITICAL 100KEV

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98952 Published 2019-04-30 No fix listed CWE-79

TI-2019-02936 CVE-2019-3930 · GHSA-xp69-2936-4v92

Stack-based buffer overflow in Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq…

MEDIUM 52

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06957 Published 2019-04-30 No fix listed CWE-121

TI-2020-17184 CVE-2020-28334 · GHSA-ww7r-3h84-p2r6

Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2).

MEDIUM 50

Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04765 Published 2020-11-24 No fix listed CWE-798

TI-2020-17183 CVE-2020-28333 · GHSA-c8j9-wpjx-gc58

Barco wePresent WiPG-1600W devices allow Authentication Bypass.

MEDIUM 48

Barco wePresent WiPG-1600W devices allow Authentication Bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03239 Published 2020-11-24 No fix listed CWE-200

TI-2020-17179 CVE-2020-28329 · GHSA-r54x-g9vf-56fv

Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is…

MEDIUM 45

Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01562 Published 2020-11-24 No fix listed CWE-798

TI-2020-17182 CVE-2020-28332 · GHSA-3j95-8976-jfmp

Barco wePresent WiPG-1600W devices download code without an Integrity Check.

MEDIUM 44

Barco wePresent WiPG-1600W devices download code without an Integrity Check.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01092 Published 2020-11-24 No fix listed CWE-494

TI-2020-17181 CVE-2020-28331 · GHSA-x6px-569j-4j5q

Barco wePresent WiPG-1600W devices have Improper Access Control.

LOW 36

Barco wePresent WiPG-1600W devices have Improper Access Control.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01694 Published 2020-11-24 No fix listed

TI-2020-17180 CVE-2020-28330 · GHSA-f2rm-99fw-5555

Barco wePresent WiPG-1600W devices have Unprotected Transport of Credentials.

LOW 31

Barco wePresent WiPG-1600W devices have Unprotected Transport of Credentials.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0116 Published 2020-11-24 No fix listed CWE-522

Open these records in search →