CVE-2021-38142

Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades. An attacker on the local network can achieve remote code execution on any computer that tries to update Windows Sender due to the fact that the upgrade mechanism is not secured is not...

CVE-2021-38142

Barco MirrorOp Windows Sender prior to version 2.5.3.65 is vulnerable due to a cleartext HTTP upgrade mechanism that is not protected with TLS. An attacker on the local network can abuse this insecure upgrade process to achieve remote code execution on any computer attempting to update Windows Se...

PT-2021-21962

Name of the Vulnerable Software and Affected Versions: Barco MirrorOp Windows Sender versions prior to 2.5.3.65 Description: The issue allows rogue software upgrades due to the use of cleartext HTTP, which is not secured with TLS. An attacker on the local network can achieve remote code execution...

Barco MirrorOp Windows Sender 代码注入漏洞

Barco MirrorOp Windows Sender is a mirroring software application for wePresent systems. A security vulnerability exists in Barco MirrorOp Windows Sender versions prior to 2.5.3.65, which stems from the software's use of clear-text HTTP, thus allowing malware upgrades. Due to the insecure upgrade...

CVE-2021-38142: Cleartext Transmission of Sensitive Information

Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades. An attacker on the local network can achieve remote code execution on any computer that tries to update Windows Sender due to the fact that the upgrade mechanism is not secured is not...

CVE-2021-35482

An issue was discovered in Barco MirrorOp Windows Sender before 2.5.4.70. An attacker in the local network is able to achieve Remote Code Execution with user privileges of the local user on any device that tries to connect to a WePresent presentation system...

CVE-2021-35482

An issue was discovered in Barco MirrorOp Windows Sender before 2.5.4.70. An attacker in the local network is able to achieve Remote Code Execution with user privileges of the local user on any device that tries to connect to a WePresent presentation system...

Remote code execution

An issue was discovered in Barco MirrorOp Windows Sender before 2.5.4.70. An attacker in the local network is able to achieve Remote Code Execution with user privileges of the local user on any device that tries to connect to a WePresent presentation system...

CVE-2021-35482

An issue was discovered in Barco MirrorOp Windows Sender before 2.5.4.70. An attacker in the local network is able to achieve Remote Code Execution with user privileges of the local user on any device that tries to connect to a WePresent presentation system...

CVE-2021-35482

CVE-2021-35482 affects Barco MirrorOp Windows Sender prior to 2.5.4.70. An attacker on the local network can trigger Remote Code Execution on any device that connects to a WePresent presentation system, executing with the local user’s privileges. The issue is tied to Barco’s WePresent/WiPG-1600W ...

Barco wePresent WiPG-1600W安全漏洞

Barco Barco wePresent WiPG-1600W is a management device for conference environments from Barco Belgium. A security vulnerability exists in Barco wePresent WiPG-1600W versions prior to 2.5.4.70. A local attacker can exploit this vulnerability to be able to achieve remote code execution on any devi...

PT-2021-20927

Name of the Vulnerable Software and Affected Versions: Barco MirrorOp Windows Sender versions prior to 2.5.4.70 Description: An issue allows an attacker in the local network to achieve Remote Code Execution with user privileges of the local user on any device that tries to connect to a WePresent...

CVE-2021-35482: Undefined Security Weakness

An issue was discovered in Barco MirrorOp Windows Sender before 2.5.4.70. An attacker in the local network is able to achieve Remote Code Execution with user privileges of the local user on any device that tries to connect to a WePresent presentation system...

Barco Transform NDN-210 Command Injection Vulnerability (CNVD-2021-04820)

The Barco Transform NDN-210 is a PC-based network graphics processor from Barco in the Netherlands. The device displays encoded streams from Gbit Ethernet/IP networks and supports formats such as H-264, MPEG-4, MPEG-2, MJPEG, V2D and ProServer. A command injection vulnerability exists in Barco...

CVE-2020-17502

Barco TransForm N before 3.8 allows Command Injection issue 2 of 4. The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users of the administration panel to perform authenticated remote code execution. An...

CVE-2020-17503

The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users to the administration panel to perform authenticated remote code execution. An issue exists in splitcardcmd.php in which the http parameter "lockin...

CVE-2020-17504

The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users to the administration panel to perform authenticated remote code execution. An issue exists in ngpsystemcmd.php in which the http parameters...

CVE-2020-17502

Barco TransForm N before 3.8 allows Command Injection issue 2 of 4. The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users of the administration panel to perform authenticated remote code execution. An...

Command injection

Barco TransForm N before 3.8 allows Command Injection issue 2 of 4. The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users of the administration panel to perform authenticated remote code execution. An...

CVE-2020-17502

CVE-2020-17502 affects Barco TransForm NDN-210 Web administration panel (Barco TransForm N) before version 3.8. A command injection vulnerability exists in split_card_cmd.php where HTTP parameters xmodules, ymodules and savelocking are not properly handled, enabling authenticated users to perform...