PT-2019-15686 · Barco · Barco Clickshare Button

Published 2019-12-16 · Updated 2019-12-23 · CVE-2019-18830

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Barco ClickShare Button R9861500D01 versions prior to 1.9.0

Description The issue affects the dongle bridge program, which is used to expose the functionalities of the ClickShare Button to a USB host. This program is vulnerable to OS command injection, potentially leading to code execution on the ClickShare Button with the privileges of the user nobody.

Recommendations For Barco ClickShare Button R9861500D01 versions prior to 1.9.0, update to version 1.9.0 or later to resolve the issue.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2019-18830

Affected Products

Barco Clickshare Button

References · 8

• https://barco.com/en/support/software/R33050070?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-18830 · Vendor Advisory
• https://barco.com/en/support/software/R33050125?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 · Vendor Advisory
• https://barco.com/en/support/software/R33050095?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 · Vendor Advisory
• https://barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-18830 · Security Note
• https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare · Note
• https://barco.com/en/clickshare/firmware-update · Note