PT-2017-8349 · Barco · Barco Clickshare Csc-1+1

Published 2017-01-12 · Updated 2026-05-13 · CVE-2016-3150

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Barco ClickShare CSC-1 devices with firmware prior to 01.09.03 Barco ClickShare CSM-1 devices with firmware prior to 01.06.02 Barco ClickShare CSE-200 devices with firmware prior to 01.03.02

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This affects the wallpaper.php file in the Base Unit of the devices.

Recommendations For Barco ClickShare CSC-1 devices with firmware prior to 01.09.03, update the firmware to version 01.09.03 or later. For Barco ClickShare CSM-1 devices with firmware prior to 01.06.02, update the firmware to version 01.06.02 or later. For Barco ClickShare CSE-200 devices with firmware prior to 01.03.02, update the firmware to version 01.03.02 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2016-3150

Affected Products

Barco Clickshare Csc-1

Barco Clickshare Cse-200

References · 6

• https://osv.dev/vulnerability/CVE-2016-3150 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-3150 · Security Note
• https://t.me/cveNotify/163314 · Telegram Post
• http://packetstormsecurity.com/files/139713/Barco-ClickShare-XSS-Remote-Code-Execution-Path-Traversal.html · Note
• http://securityfocus.com/archive/1/539754/100/0/threaded · Note
• http://securityfocus.com/bid/94330 · Note