CRITICAL
Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection
Published Dec 16, 2019
9.8
CRITICALCVSS 3.1
EPSS 4.34%
Description
Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection. The embedded 'dongle_bridge' program used to expose the functionalities of the ClickShare Button to a USB host, is vulnerable to OS command injection vulnerabilities. These vulnerabilities could lead to code execution on the ClickShare Button with the privileges of the user 'nobody'.
Affected products
No data.
Configuration 1
AND
- < 1.9.0
Running on/with
- n/a
Configuration 2
AND
- < 1.9.0
Running on/with
- n/a
Configuration 3
AND
- < 1.9.0
Running on/with
- n/a
Configuration 4
AND
- < 1.9.0
Running on/with
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (6)
- https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/ x_refsource_MISCThird Party Advisory
- https://www.barco.com/en/clickshare/firmware-update x_refsource_MISCProduct
- https://www.barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 x_refsource_MISCProductVendor Advisory
- https://www.barco.com/en/support/software/R33050070?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 x_refsource_MISCProductVendor Advisory
- https://www.barco.com/en/support/software/R33050095?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 x_refsource_MISCProductVendor Advisory
- https://www.barco.com/en/support/software/R33050125?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 x_refsource_MISCProductVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/ | x_refsource_MISCThird Party Advisory | |
| https://www.barco.com/en/clickshare/firmware-update | x_refsource_MISCProduct | |
| https://www.barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 | x_refsource_MISCProductVendor Advisory | |
| https://www.barco.com/en/support/software/R33050070?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 | x_refsource_MISCProductVendor Advisory | |
| https://www.barco.com/en/support/software/R33050095?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 | x_refsource_MISCProductVendor Advisory | |
| https://www.barco.com/en/support/software/R33050125?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 | x_refsource_MISCProductVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Dec 16, 2019
Updated Aug 5, 2024
Reserved Nov 7, 2019
Link CVE-2019-18830
CISA Vulnrichment
Updated n/a