PT-2017-8349

Name of the Vulnerable Software and Affected Versions Barco ClickShare CSC-1 devices with firmware prior to 01.09.03 Barco ClickShare CSM-1 devices with firmware prior to 01.06.02 Barco ClickShare CSE-200 devices with firmware prior to 01.03.02 Description A cross-site scripting XSS issue allows...

CVE-2016-3152: Exposure of Sensitive Information to an Unauthorized Actor

Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware image...

PT-2017-8350

Name of the Vulnerable Software and Affected Versions Barco ClickShare CSC-1 devices with firmware prior to 01.09.03 Barco ClickShare CSM-1 devices with firmware prior to 01.06.02 Barco ClickShare CSE-200 devices with firmware prior to 01.03.02 Description A directory traversal issue exists in th...

PT-2017-8351

Name of the Vulnerable Software and Affected Versions Barco ClickShare CSC-1 devices with firmware prior to 01.09.03 Description The issue allows remote attackers to obtain the root password by downloading and extracting the firmware image. Recommendations For Barco ClickShare CSC-1 devices with...

CVE-2016-3151: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to read /etc/shadow via unspecified...

CVE-2016-3150: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to inject arbitrary web script or HTML v...

CVE-2016-3149: Undefined Security Weakness

Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execute arbitrary code via unspecified vectors...

Barco ClickShare Directory Traversal Vulnerability

ClickShare is Barco's wireless presentation collaboration system that allows all participants to share content on a centralized conference room screen. The Barco ClickShare directory traversal vulnerability can be exploited by an attacker to view arbitrary local files and directories in the conte...

Barco ClickShare Cross-Site Scripting Vulnerability

ClickShare is Barco's wireless presentation collaboration system that allows all participants to share content on a centralized conference room screen. A cross-site scripting vulnerability exists in Barco ClickShare because it does not adequately filter user-supplied input. A remote attacker coul...

Barco ClickShare Remote Code Execution Vulnerability

ClickShare is Barco's wireless presentation collaboration system that allows all participants to share content on a centralized conference room screen. A remote code execution vulnerability exists in Barco ClickShare. The vulnerability allows an attacker to execute arbitrary code in the context o...

Barco ClickShare Arbitrary File Disclosure Vulnerability

ClickShare is Barco's wireless presentation collaboration system that allows all participants to share content on a centralized conference room screen. An arbitrary file disclosure vulnerability exists in Barco ClickShare because it does not adequately validate user-supplied input. An attacker...

Barco ClickShare XSS / Remote Code Execution / Path Traversal Vulnerabilities

Barco ClickShare suffers from remote code execution, cross site scripting, path traversal, and file disclosure vulnerabilities. CVE-2016-3149 - Remote Code Execution in Barco ClickShare CSC-1 and CSM-1 Affected versions: all versions prior to v01.09.03 CSC-1 and v01.06.02 CSM-1. A remote code...

PT-2016-3213

Name of the Vulnerable Software and Affected Versions Barco ClickShare CSC-1 devices with firmware prior to 01.09.03 Barco ClickShare CSM-1 devices with firmware prior to 01.06.02 Description The issue is related to improper data handling in the firmware of Barco ClickShare CSM-1 and ClickShare...

Barco ClickShare Device Detect

Binary data barcoclicksharedetect.nbin...

Barco ClickShare Device Default Credentials

Nessus was able to login to the web administration interface on the remote Barco ClickShare device using a default set of known credentials. A remote attacker can exploit this to gain administrative control of the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...