364 matches found
Barco ClickShare Devices OS Command Injection (CVE-2017-9377)
A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device. This plugin only works...
Barco ClickShare Devices Arbitrary Code Execution (CVE-2016-3149)
Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execute arbitrary code via unspecified vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
Barco ClickShare Devices Improper Authorization (CVE-2019-18827)
On Barco ClickShare Button R9861500D01 devices before firmware version 1.9.0 JTAG access is disabled after ROM code execution. This means that JTAG access is possible when the system is running code from ROM before handing control over to embedded firmware. This plugin only works with Tenable.ot...
Barco ClickShare Devices Path Traversal (CVE-2016-3151)
Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to read /etc/shadow via unspecified...
Barco ClickShare Devices Improper Input Validation (CVE-2018-10943)
An issue was discovered on Barco ClickShare CSE-200 and CS-100 Base Units with firmware before 1.6.0.3. Sending an arbitrary unexpected string to TCP port 7100 respecting a certain frequency timing disconnects all clients and results in a crash of the Unit. This plugin only works with Tenable.ot...
Barco ClickShare Devices Cross-site Scripting (CVE-2017-12460)
An issue was discovered in Barco ClickShare CSM-1 firmware before v1.7.0.3 and CSC-1 firmware before v1.10.0.10. An authenticated user can manage the wallpaper collection in the webUI to be shown as background on the ClickShare product. By uploading a wallpaper with a specially crafted name, an...
Barco ClickShare Devices Weak Password Requirements (CVE-2019-18828)
Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials. The root account present for access via debug interfaces, which are by default not enabled on production devices of the embedded Linux on the ClickShare Button is using a weak password. This plugin...
EUVD-2019-8534
Malware in sbrugna...
EUVD-2020-20795
Malware in sbrugna...
EUVD-2020-20792
Malware in sbrugna...
EUVD-2016-4204
Malware in sbrugna...
EUVD-2017-18312
Malware in sbrugna...
EUVD-2018-2995
Malware in sbrugna...
EUVD-2021-22124
Malware in sbrugna...
EUVD-2020-9452
Malware in sbrugna...
EUVD-2016-4203
Malware in sbrugna...
EUVD-2019-8531
Malware in sbrugna...
EUVD-2020-9448
Malware in sbrugna...