CVE-2016-3149

Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 are affected by a remote code execution vulnerability. The gap allows remote attackers to execute arbitrary code via unspecified vectors on affected devices exposed to a network. The infor...

CVE-2016-3152

CVE-2016-3152 affects Barco ClickShare CSC-1 devices with firmware prior to 01.09.03. The Tenable.ot NASL plugin notes that remote attackers could obtain the root password by downloading and extracting the firmware image. The provided connected document does not specify a patch or remediation, no...

CVE-2016-3149

Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2016-3152

Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware image...

CVE-2016-3150

Barco ClickShare CVE-2016-3150 is a cross-site scripting (XSS) vulnerability in wallpaper.php within the Base Unit of Barco ClickShare CSC-1 devices (firmware before 01.09.03), CSM-1 devices (before 01.06.02), and CSE-200 devices (before 01.03.02). The issue permits remote attackers to inject arb...

CVE-2016-3150

Cross-site scripting XSS vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to inject arbitrary web script or HTML v...

PT-2017-8349

Name of the Vulnerable Software and Affected Versions Barco ClickShare CSC-1 devices with firmware prior to 01.09.03 Barco ClickShare CSM-1 devices with firmware prior to 01.06.02 Barco ClickShare CSE-200 devices with firmware prior to 01.03.02 Description A cross-site scripting XSS issue allows...

PT-2017-8351

Name of the Vulnerable Software and Affected Versions Barco ClickShare CSC-1 devices with firmware prior to 01.09.03 Description The issue allows remote attackers to obtain the root password by downloading and extracting the firmware image. Recommendations For Barco ClickShare CSC-1 devices with...

PT-2017-8350

Name of the Vulnerable Software and Affected Versions Barco ClickShare CSC-1 devices with firmware prior to 01.09.03 Barco ClickShare CSM-1 devices with firmware prior to 01.06.02 Barco ClickShare CSE-200 devices with firmware prior to 01.03.02 Description A directory traversal issue exists in th...

Barco ClickShare Cross-Site Scripting Vulnerability

ClickShare is Barco's wireless presentation collaboration system that allows all participants to share content on a centralized conference room screen. A cross-site scripting vulnerability exists in Barco ClickShare because it does not adequately filter user-supplied input. A remote attacker coul...

Barco ClickShare Remote Code Execution Vulnerability

ClickShare is Barco's wireless presentation collaboration system that allows all participants to share content on a centralized conference room screen. A remote code execution vulnerability exists in Barco ClickShare. The vulnerability allows an attacker to execute arbitrary code in the context o...

Barco ClickShare Directory Traversal Vulnerability

ClickShare is Barco's wireless presentation collaboration system that allows all participants to share content on a centralized conference room screen. The Barco ClickShare directory traversal vulnerability can be exploited by an attacker to view arbitrary local files and directories in the conte...

Barco ClickShare Arbitrary File Disclosure Vulnerability

ClickShare is Barco's wireless presentation collaboration system that allows all participants to share content on a centralized conference room screen. An arbitrary file disclosure vulnerability exists in Barco ClickShare because it does not adequately validate user-supplied input. An attacker...

Barco ClickShare XSS / Remote Code Execution / Path Traversal Vulnerabilities

Barco ClickShare suffers from remote code execution, cross site scripting, path traversal, and file disclosure vulnerabilities. CVE-2016-3149 - Remote Code Execution in Barco ClickShare CSC-1 and CSM-1 Affected versions: all versions prior to v01.09.03 CSC-1 and v01.06.02 CSM-1. A remote code...

Barco ClickShare Device Detect

Binary data barcoclicksharedetect.nbin...

Barco ClickShare Device Default Credentials

Nessus was able to login to the web administration interface on the remote Barco ClickShare device using a default set of known credentials. A remote attacker can exploit this to gain administrative control of the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...