PT-2019-15682 · Barco · Barco Clickshare Cse-200+1

Published 2019-12-17 · Updated 2019-12-26 · CVE-2019-18825

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Barco ClickShare Huddle CS-100 versions prior to 1.9.0 Barco ClickShare CSE-200 versions prior to 1.9.0

Description The issue concerns incorrect Credentials Management in the affected devices. The ClickShare Base Unit uses encryption at rest with encryption keys shared across all ClickShare Base Units of models CS-100 and CSE-200.

Recommendations For Barco ClickShare Huddle CS-100 versions prior to 1.9.0, update to version 1.9.0 or later. For Barco ClickShare CSE-200 versions prior to 1.9.0, update to version 1.9.0 or later.

Exploit

Fix

Related Identifiers

CVE-2019-18825

Affected Products

Barco Clickshare Cse-200

Barco Clickshare Huddle Cs-100

References · 4

• 🔥 https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare · Exploit
• https://barco.com/en/clickshare/firmware-update · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-18825 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-18825 · Security Note