PT-2019-15689 · Barco · Clickshare Button+1

Publicado 2019-12-17 · Atualizado 2019-12-26 · CVE-2019-18833

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Barco ClickShare Button R9861500D01 versions prior to 1.9.0

Description The issue allows information exposure. The encryption key of the media content shared between a ClickShare Button and a ClickShare Base Unit is randomly generated for each new session and communicated over a TLS connection. An attacker who can perform a Man-in-the-Middle attack between the TLS connection can obtain the encryption key.

Recommendations For versions prior to 1.9.0, update to version 1.9.0 or later to resolve the issue. As a temporary workaround, consider implementing additional security measures to prevent Man-in-the-Middle attacks, such as verifying the identity of the ClickShare Base Unit and ensuring the TLS connection is secure.

Exploit

Correção

Missing Encryption of Sensitive Data

Enumeração de Fraquezas

CWE-311

Identificadores relacionados

CVE-2019-18833

Produtos afetados

Clickshare Base Unit

Clickshare Button

Referências · 4

• 🔥 https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare · Exploit
• https://barco.com/en/clickshare/firmware-update · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-18833 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-18833 · Nota de Segurança