364 matches found
Barco ClickShare Devices OS Command Injection (CVE-2019-18830)
Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection. The embedded 'donglebridge' program used to expose the functionalities of the ClickShare Button to a USB host, is vulnerable to OS command injection vulnerabilities. These vulnerabilities could lead to code...
Barco ClickShare Devices Improper Input Validation (CVE-2018-10943)
An issue was discovered on Barco ClickShare CSE-200 and CS-100 Base Units with firmware before 1.6.0.3. Sending an arbitrary unexpected string to TCP port 7100 respecting a certain frequency timing disconnects all clients and results in a crash of the Unit. This plugin only works with Tenable.ot...
Barco ClickShare Devices Exposure of Sensitive Information to an Unauthorized Actor (CVE-2016-3152)
Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware image. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...
Barco ClickShare Devices Improper Certificate Validation (CVE-2019-18826)
Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate's Chain of Trust. The embedded 'donglebridge' program used to expose the functionalities of the ClickShare Button to a USB host, does not properly validate the whole certificate chain. This plugin on...
Barco ClickShare Devices Cross-site Scripting (CVE-2017-12460)
An issue was discovered in Barco ClickShare CSM-1 firmware before v1.7.0.3 and CSC-1 firmware before v1.10.0.10. An authenticated user can manage the wallpaper collection in the webUI to be shown as background on the ClickShare product. By uploading a wallpaper with a specially crafted name, an...
Barco ClickShare Devices Incorrect Credentials Management (CVE-2019-18825)
Barco ClickShare Huddle CS-100 devices before 1.9.0 and CSE-200 devices before 1.9.0 have incorrect Credentials Management. The ClickShare Base Unit implements encryption at rest using encryption keys which are shared across all ClickShare Base Units of models CS-100 & CSE-200. This plugin only...
Barco ClickShare Devices Improper Authorization (CVE-2019-18827)
On Barco ClickShare Button R9861500D01 devices before firmware version 1.9.0 JTAG access is disabled after ROM code execution. This means that JTAG access is possible when the system is running code from ROM before handing control over to embedded firmware. This plugin only works with Tenable.ot...
EUVD-2019-8534
Malware in sbrugna...
EUVD-2020-9450
Malware in sbrugna...
EUVD-2017-4032
Malware in sbrugna...
EUVD-2016-4203
Malware in sbrugna...
EUVD-2016-4202
Malware in sbrugna...
EUVD-2019-8526
Malware in sbrugna...
EUVD-2017-18312
Malware in sbrugna...
EUVD-2020-9451
Malware in sbrugna...
EUVD-2019-8530
Malware in sbrugna...
EUVD-2020-9448
Malware in sbrugna...
EUVD-2020-20795
Malware in sbrugna...