Barco ClickShare Devices OS Command Injection (CVE-2019-18830)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(503356);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/10/09");

  script_cve_id("CVE-2019-18830");

  script_name(english:"Barco ClickShare Devices OS Command Injection (CVE-2019-18830)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS
Command Injection. The embedded 'dongle_bridge' program used to expose
the functionalities of the ClickShare Button to a USB host, is
vulnerable to OS command injection vulnerabilities. These
vulnerabilities could lead to code execution on the ClickShare Button
with the privileges of the user 'nobody'.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?c52e85b9");
  script_set_attribute(attribute:"see_also", value:"https://www.barco.com/en/clickshare/firmware-update");
  # https://www.barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?946efa15");
  # https://www.barco.com/en/support/software/R33050070?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?25dcdea6");
  # https://www.barco.com/en/support/software/R33050095?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?5ca5c22e");
  # https://www.barco.com/en/support/software/R33050125?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?edaedcdc");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-18830");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_cwe_id(78);

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/12/16");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/12/16");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/10/09");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:barco:clickshare_cs-100_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:barco:clickshare_cse-200%2b_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:barco:clickshare_cse-200_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:barco:clickshare_cse-800_firmware");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Barco");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Barco');

var asset = tenable_ot::assets::get(vendor:'Barco');

var vuln_cpes = {
    "cpe:/o:barco:clickshare_cs-100_firmware" :
        {"versionEndExcluding" : "1.9.0", "family" : "ClickShare"},
    "cpe:/o:barco:clickshare_cse-200_firmware" :
        {"versionEndExcluding" : "1.9.0", "family" : "ClickShare"},
    "cpe:/o:barco:clickshare_cse-200%2b_firmware" :
        {"versionEndExcluding" : "1.9.0", "family" : "ClickShare"},
    "cpe:/o:barco:clickshare_cse-800_firmware" :
        {"versionEndExcluding" : "1.9.0", "family" : "ClickShare"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);