CVE-2019-18833

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information exposure issue 2 of 2.. The encryption key of the media content which is shared between a ClickShare Button and a ClickShare Base Unit is randomly generated for each new session and communicated over a TLS connection. An...

CVE-2019-18824

Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used...

CVE-2019-18829

Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The Barco signed 'ClickshareForWindows.exe' binary on the ClickShare Button R9861500D01 loads a number of DLL files dynamically without verifying their integrity...

CVE-2019-18832

Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management. The ClickShare Button implements encryption at rest which uses a one-time programmable OTP AES encryption key. This key is shared across all ClickShare Buttons of model R9861500D01...

CVE-2019-18829

Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The Barco signed 'ClickshareForWindows.exe' binary on the ClickShare Button R9861500D01 loads a number of DLL files dynamically without verifying their integrity...

CVE-2019-18833

Barco ClickShare Button R9861500D01 devices prior to 1.9.0 are affected. The issue allows information exposure because the per-session symmetric encryption key used for media content is generated for each session and transmitted over TLS; a Man-in-the-Middle between the TLS connection can obtain ...

CVE-2019-18832

Barco ClickShare Button R9861500D01 devices prior to 1.9.0 are affected by a credentials management issue for the at-rest encryption key. The one-time-programmable AES key is shared across all Buttons of model R9861500D01, enabling potential credential-related exposure. Red Hat and CVE records co...

CVE-2019-18829

Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The Barco signed 'ClickshareForWindows.exe' binary on the ClickShare Button R9861500D01 loads a number of DLL files dynamically without verifying their integrity...

CVE-2019-18829

Barco ClickShare Button R9861500D01 devices prior to firmware 1.10.0.13 are affected by a vulnerability where the Barco-signed Clickshare_For_Windows.exe binary loads multiple DLLs dynamically without verifying their integrity. Root cause: lack of DLL integrity checks during dynamic loading. Repo...

CVE-2019-18824

Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used...

PT-2019-15685

Name of the Vulnerable Software and Affected Versions Barco ClickShare Button R9861500D01 versions prior to 1.10.0.13 Description The issue concerns missing support for integrity checks in the Barco ClickShare Button. Specifically, the Clickshare For Windows.exe binary loads DLL files dynamically...

PT-2019-15689

Name of the Vulnerable Software and Affected Versions Barco ClickShare Button R9861500D01 versions prior to 1.9.0 Description The issue allows information exposure. The encryption key of the media content shared between a ClickShare Button and a ClickShare Base Unit is randomly generated for each...

PT-2019-15681

Name of the Vulnerable Software and Affected Versions Barco ClickShare Button R9861500D01 versions prior to 1.10.0.13 Description The issue is related to missing support for integrity checks in the ClickShare Button. Specifically, it does not verify the integrity of mutable content on the UBIFS...

CVE-2019-18832: Use of a Broken or Risky Cryptographic Algorithm

Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management. The ClickShare Button implements encryption at rest which uses a one-time programmable OTP AES encryption key. This key is shared across all ClickShare Buttons of model R9861500D01...

PT-2019-15688

Name of the Vulnerable Software and Affected Versions Barco ClickShare Button R9861500D01 versions prior to 1.9.0 Description The issue concerns incorrect Credentials Management in the affected devices. Specifically, the ClickShare Button implements encryption at rest using a one-time programmabl...

CVE-2019-18829: Insufficient Verification of Data Authenticity

Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The Barco signed 'ClickshareForWindows.exe' binary on the ClickShare Button R9861500D01 loads a number of DLL files dynamically without verifying their integrity...

CVE-2019-18833: Missing Encryption of Sensitive Data

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information exposure issue 2 of 2.. The encryption key of the media content which is shared between a ClickShare Button and a ClickShare Base Unit is randomly generated for each new session and communicated over a TLS connection. An...

CVE-2019-18824: Insufficient Verification of Data Authenticity

Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used...

CVE-2019-18828

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials. The root account present for access via debug interfaces, which are by default not enabled on production devices of the embedded Linux on the ClickShare Button is using a weak password...

CVE-2019-18830

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection. The embedded 'donglebridge' program used to expose the functionalities of the ClickShare Button to a USB host, is vulnerable to OS command injection vulnerabilities. These vulnerabilities could lead to code...