Lucene search

MitreCVE-2019-18824

HistoryDec 17, 2019 - 2:15 p.m.

CVE-2019-18824

2019-12-1714:15:17

CWE-345

mitre

web.nvd.nist.gov

cve-2019-18824

barco clickshare

integrity check

security vulnerability

nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

6.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

57.0%

JSON

Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used.

Affected configurations

Nvd

Node

barcoclickshare_button_r9861500d01_firmwareRange<1.10.0.13

AND

barcoclickshare_button_r9861500d01Match-

VendorProductVersionCPE
barcoclickshare_button_r9861500d01_firmware*cpe:2.3:o:barco:clickshare_button_r9861500d01_firmware:*:*:*:*:*:*:*:*
barcoclickshare_button_r9861500d01-cpe:2.3:h:barco:clickshare_button_r9861500d01:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
barco	clickshare_button_r9861500d01_firmware	*	cpe:2.3:o:barco:clickshare_button_r9861500d01_firmware::::::::
barco	clickshare_button_r9861500d01	-	cpe:2.3:h:barco:clickshare_button_r9861500d01:-:::::::*

References

labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/

www.barco.com/en/clickshare/firmware-update

www.barco.com/en/clickshare/support/software/R33050069?majorVersion=01&minorVersion=10&patchVersion=00&buildVersion=013

www.barco.com/en/clickshare/support/software/R33050070?majorVersion=01&minorVersion=10&patchVersion=00&buildVersion=013

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

6.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

57.0%

JSON

Related for CVE-2019-18824