Vulnerabilities

TI-2017-09197 CVE-2017-12460 · GHSA-8m7j-v4xc-hg9r

An issue was discovered in Barco ClickShare CSM-1 firmware before v1.7.0.3 and CSC-1…

LOW 25

An issue was discovered in Barco ClickShare CSM-1 firmware before v1.7.0.3 and CSC-1 firmware before v1.10.0.10.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00641 Published 2017-10-30 No fix listed CWE-79

TI-2017-06801 CVE-2017-9377 · GHSA-2pp4-6872-69xx

A command injection was identified on Barco ClickShare Base Unit devices with CSM-1…

MEDIUM 45

A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.04345 Published 2017-10-30 No fix listed CWE-78

TI-2016-02642 CVE-2016-3152 · GHSA-2wvv-6r6q-wwcj

Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to…

MEDIUM 47

Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware image.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02774 Published 2017-01-12 No fix listed CWE-200

TI-2016-02641 CVE-2016-3151 · GHSA-qf7x-5whr-gj84

Directory traversal vulnerability in the wallpaper parsing functionality in Barco…

MEDIUM 40

Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware bef…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04276 Published 2017-01-12 No fix listed CWE-22

TI-2016-02640 CVE-2016-3150 · GHSA-f5fp-r73r-m33f

Cross-site scripting (XSS) vulnerability in wallpaper.php in the Base Unit in Barco…

LOW 30

Cross-site scripting (XSS) vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware b…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01261 Published 2017-01-12 No fix listed CWE-79

TI-2016-02639 CVE-2016-3149 · GHSA-mh8p-wwgw-w9wc

Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with…

MEDIUM 53

Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execute arbitrary code via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.07735 Published 2017-01-12 No fix listed