PT-2017-18887 · Barco · Clickshare Base Unit

Publicado 2017-10-30 · Atualizado 2019-10-03 · CVE-2017-9377

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Barco ClickShare Base Unit devices with CSM-1 firmware versions prior to 1.7.0.3 Barco ClickShare Base Unit devices with CSC-1 firmware versions prior to 1.10.0.10

Description A command injection issue was identified, allowing an attacker with access to the product's web API to completely compromise the vulnerable device.

Recommendations For Barco ClickShare Base Unit devices with CSM-1 firmware versions prior to 1.7.0.3, update to version 1.7.0.3 or later to resolve the issue. For Barco ClickShare Base Unit devices with CSC-1 firmware versions prior to 1.10.0.10, update to version 1.10.0.10 or later to resolve the issue.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2017-9377

Produtos afetados

Clickshare Base Unit

Referências · 6

• https://barco.com/en/Support/software/R33050037 · Correção
• https://barco.com/en/support/software/R33050020 · Correção
• https://contextis.com/resources/advisories/cve-2017-9377 · Nota
• http://securityfocus.com/bid/101617 · Nota
• https://osv.dev/vulnerability/CVE-2017-9377 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-9377 · Nota de Segurança