Priority MEDIUM 64
A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00334 · Published 2026-09-28 · No fix listed CWE-1286
Priority LOW 28
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checklogin.jsp endpoint.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00575 · Published 2022-06-01 · No fix listed CWE-79
Priority LOW 28
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00575 · Published 2022-06-01 · No fix listed CWE-79
Priority LOW 25
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00461 · Published 2022-06-01 · No fix listed CWE-79
Priority LOW 35
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01028 · Published 2022-06-01 · No fix listed CWE-287
Priority LOW 28
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a file upload mechanism.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00575 · Published 2022-06-01 · No fix listed CWE-79
Priority LOW 25
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00785 · Published 2022-06-01 · No fix listed CWE-209
Priority LOW 28
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00575 · Published 2022-06-01 · No fix listed CWE-79
Priority LOW 25
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00738 · Published 2022-06-01 · No fix listed CWE-306
Priority MEDIUM 49
Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and components.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.15028 · Published 2022-04-03 · No fix listed CWE-22
Priority LOW 39
Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00475 · Published 2021-09-07 · No fix listed CWE-319
Priority LOW 34
An issue was discovered in Barco MirrorOp Windows Sender before 2.5.4.70.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00441 · Published 2021-07-21 · No fix listed
Priority LOW 37
The NDN-210 has a web administration panel which is made available over https.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02971 · Published 2021-01-08 · No fix listed CWE-77
Priority LOW 37
The NDN-210 has a web administration panel which is made available over https.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02971 · Published 2021-01-08 · No fix listed CWE-77
Priority LOW 37
Barco TransForm N before 3.8 allows Command Injection (issue 2 of 4).
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02971 · Published 2021-01-08 · No fix listed CWE-77
Priority MEDIUM 49
Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows Command Injection (issue 1 of 4).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04108 · Published 2021-01-07 · No fix listed CWE-77
Priority MEDIUM 45
Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01562 · Published 2020-11-24 · No fix listed CWE-798
Priority MEDIUM 44
Barco wePresent WiPG-1600W devices download code without an Integrity Check.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01092 · Published 2020-11-24 · No fix listed CWE-494
Priority MEDIUM 50
Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04765 · Published 2020-11-24 · No fix listed CWE-798
Priority LOW 31
Barco wePresent WiPG-1600W devices have Unprotected Transport of Credentials.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0116 · Published 2020-11-24 · No fix listed CWE-522
Priority MEDIUM 48
Barco wePresent WiPG-1600W devices allow Authentication Bypass.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03239 · Published 2020-11-24 · No fix listed CWE-200
Priority LOW 36
Barco wePresent WiPG-1600W devices have Improper Access Control.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01694 · Published 2020-11-24 · No fix listed
Priority LOW 26
Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information exposure (issue 2 of 2)..
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00365 · Published 2019-12-17 · No fix listed CWE-311
Priority LOW 36
Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00434 · Published 2019-12-17 · No fix listed CWE-327
Priority LOW 34
Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00327 · Published 2019-12-17 · No fix listed CWE-345
Load more
THREATIST.IORead the docs