CVE-2019-18832 - Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management

Back Back to CVE browser

HIGH

Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management

Published Dec 17, 2019

8.1

HIGH

CVSS 3.1

EPSS 0.43%

Description

Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management. The ClickShare Button implements encryption at rest which uses a one-time programmable (OTP) AES encryption key. This key is shared across all ClickShare Buttons of model R9861500D01.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-327

Broken Crypto Algorithm

References (2)

https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/
x_refsource_MISCExploitThird Party Advisory
https://www.barco.com/en/clickshare/firmware-update
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/		x_refsource_MISCExploitThird Party Advisory
https://www.barco.com/en/clickshare/firmware-update		x_refsource_MISCVendor Advisory