PT-2019-15686 · Barco · Barco Clickshare Button

Publicado 2019-12-16 · Atualizado 2019-12-23 · CVE-2019-18830

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Barco ClickShare Button R9861500D01 versions prior to 1.9.0

Description The issue affects the dongle bridge program, which is used to expose the functionalities of the ClickShare Button to a USB host. This program is vulnerable to OS command injection, potentially leading to code execution on the ClickShare Button with the privileges of the user nobody.

Recommendations For Barco ClickShare Button R9861500D01 versions prior to 1.9.0, update to version 1.9.0 or later to resolve the issue.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2019-18830

Produtos afetados

Barco Clickshare Button

Referências · 8

• https://barco.com/en/support/software/R33050070?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-18830 · Aviso do Fabricante
• https://barco.com/en/support/software/R33050125?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 · Aviso do Fabricante
• https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare · Nota
• https://barco.com/en/support/software/R33050095?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 · Aviso do Fabricante
• https://barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 · Aviso do Fabricante
• https://barco.com/en/clickshare/firmware-update · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-18830 · Nota de Segurança