PT-2016-3213 · Barco · Clickshare Csc-1

Published 2016-11-14 · Updated 2018-10-09 · CVE-2016-3149

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Barco ClickShare CSC-1 devices with firmware prior to 01.09.03 Barco ClickShare CSM-1 devices with firmware prior to 01.06.02

Description The issue is related to improper data handling in the firmware of Barco ClickShare CSM-1 and ClickShare CSC-1 wireless presentation systems. This allows remote attackers to execute arbitrary code via unspecified vectors.

Recommendations For Barco ClickShare CSC-1 devices with firmware prior to 01.09.03, update the firmware to version 01.09.03 or later. For Barco ClickShare CSM-1 devices with firmware prior to 01.06.02, update the firmware to version 01.06.02 or later.

Fix

Weakness Enumeration

CWE-19

Related Identifiers

BDU:2017-02542

CVE-2016-3149

Affected Products

Clickshare Csc-1

References · 7

• https://osv.dev/vulnerability/CVE-2016-3149 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-02542 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-3149 · Security Note
• http://securityfocus.com/bid/94323 · Note
• http://securityfocus.com/archive/1/archive/1/539754/100/0/threaded · Note
• http://securityfocus.com/archive/1/539754/100/0/threaded · Note
• http://packetstormsecurity.com/files/139713/Barco-ClickShare-XSS-Remote-Code-Execution-Path-Traversal.html · Note