Barco ClickShare Devices Weak Password Requirements (CVE-2019-18828)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(503365);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/10/09");

  script_cve_id("CVE-2019-18828");

  script_name(english:"Barco ClickShare Devices Weak Password Requirements (CVE-2019-18828)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"Barco ClickShare Button R9861500D01 devices before 1.9.0 have
Insufficiently Protected Credentials. The root account (present for
access via debug interfaces, which are by default not enabled on
production devices) of the embedded Linux on the ClickShare Button is
using a weak password.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?c52e85b9");
  script_set_attribute(attribute:"see_also", value:"https://www.barco.com/en/clickshare/firmware-update");
  # https://www.barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?946efa15");
  # https://www.barco.com/en/support/software/R33050070?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?25dcdea6");
  # https://www.barco.com/en/support/software/R33050095?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?5ca5c22e");
  # https://www.barco.com/en/support/software/R33050125?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?edaedcdc");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-18828");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_cwe_id(521);

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/12/16");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/12/16");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/10/09");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:barco:clickshare_cs-100_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:barco:clickshare_cse-200%2b_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:barco:clickshare_cse-200_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:barco:clickshare_cse-800_firmware");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Barco");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Barco');

var asset = tenable_ot::assets::get(vendor:'Barco');

var vuln_cpes = {
    "cpe:/o:barco:clickshare_cs-100_firmware" :
        {"versionEndExcluding" : "1.9.0", "family" : "ClickShare"},
    "cpe:/o:barco:clickshare_cse-200_firmware" :
        {"versionEndExcluding" : "1.9.0", "family" : "ClickShare"},
    "cpe:/o:barco:clickshare_cse-200%2b_firmware" :
        {"versionEndExcluding" : "1.9.0", "family" : "ClickShare"},
    "cpe:/o:barco:clickshare_cse-800_firmware" :
        {"versionEndExcluding" : "1.9.0", "family" : "ClickShare"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);