MEDIUM
Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials
Published Dec 16, 2019
6.8
MEDIUMCVSS 3.1
EPSS 0.39%
Description
Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials. The root account (present for access via debug interfaces, which are by default not enabled on production devices) of the embedded Linux on the ClickShare Button is using a weak password.
Affected products
No data.
Configuration 1
AND
- < 1.9.0
Running on/with
- n/a
Configuration 2
AND
- < 1.9.0
Running on/with
- n/a
Configuration 3
AND
- < 1.9.0
Running on/with
- n/a
Configuration 4
AND
- < 1.9.0
Running on/with
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (6)
- https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/ x_refsource_MISCThird Party Advisory
- https://www.barco.com/en/clickshare/firmware-update x_refsource_MISCProduct
- https://www.barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 x_refsource_MISCProductVendor Advisory
- https://www.barco.com/en/support/software/R33050070?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 x_refsource_MISCProductVendor Advisory
- https://www.barco.com/en/support/software/R33050095?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 x_refsource_MISCProductVendor Advisory
- https://www.barco.com/en/support/software/R33050125?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 x_refsource_MISCProductVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/ | x_refsource_MISCThird Party Advisory | |
| https://www.barco.com/en/clickshare/firmware-update | x_refsource_MISCProduct | |
| https://www.barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 | x_refsource_MISCProductVendor Advisory | |
| https://www.barco.com/en/support/software/R33050070?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 | x_refsource_MISCProductVendor Advisory | |
| https://www.barco.com/en/support/software/R33050095?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 | x_refsource_MISCProductVendor Advisory | |
| https://www.barco.com/en/support/software/R33050125?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 | x_refsource_MISCProductVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Dec 16, 2019
Updated Aug 5, 2024
Reserved Nov 7, 2019
Link CVE-2019-18828
CISA Vulnrichment
Updated n/a