CVE-2018-10943: Improper Input Validation

An issue was discovered on Barco ClickShare CSE-200 and CS-100 Base Units with firmware before 1.6.0.3. Sending an arbitrary unexpected string to TCP port 7100 respecting a certain frequency timing disconnects all clients and results in a crash of the Unit...

Barco ClickShare CSE-200 Denial Of Service Vulnerability

Exploit for hardware platform in category dos / poc !/usr/bin/python Exploit Title: Barco ClickShare CSE-200 - Remote Denial of Service Date: 11-04-2018 Hardware Link: https://www.barco.com/de/product/clickshare-cse-200 Exploit Author: Florian Hauser Contact: florian DOT g DOT hauser AT gmail DOT...

Barco ClickShare CSE-200 Denial Of Service

!/usr/bin/python Exploit Title: Barco ClickShare CSE-200 - Remote Denial of Service Date: 11-04-2018 Hardware Link: https://www.barco.com/de/product/clickshare-cse-200 Exploit Author: Florian Hauser Contact: florian DOT g DOT hauser AT gmail DOT com CVE: requested by Barco Category: Hardware...

Barco ClickShare CSE-200 - Remote Denial of Service

Barco ClickShare CSE-200 - Remote Denial of Service !/usr/bin/python Exploit Title: Barco ClickShare CSE-200 - Remote Denial of Service Date: 11-04-2018 Hardware Link: https://www.barco.com/de/product/clickshare-cse-200 Exploit Author: Florian Hauser Contact: florian DOT g DOT hauser AT gmail DOT...

Barco ClickShare CSE-200 - Remote Denial of Service

!/usr/bin/python Exploit Title: Barco ClickShare CSE-200 - Remote Denial of Service Date: 11-04-2018 Hardware Link: https://www.barco.com/de/product/clickshare-cse-200 Exploit Author: Florian Hauser Contact: florian DOT g DOT hauser AT gmail DOT com CVE: requested by Barco Category: Hardware...

ClickShare CSM-1 CSC-1 Code Execution

The vulnerability of the microprogrammed software in Barco ClickShare CSM-1 and ClickShare CSC-1 wireless presentation systems is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the affected application remotely...

Unspecified Vulnerability in Barco ClickShare CSM-1 and ClickShare CSC-1

The Barco ClickShare CSM-1 and ClickShare CSC-1 are both host devices for the wireless presentation system from Barco Belgium. A security vulnerability exists in the Barco ClickShare CSM-1 using firmware versions prior to 1.7.0.3 and the Barco ClickShare CSC-1 using firmware versions prior to...

Barco ClickShare CSM-1 Base Unit and ClickShare CSC-1 Base Unit Command Injection Vulnerabilities

The Barco ClickShare CSM-1 Base Unit and ClickShare CSC-1 Base Unit are both host devices for wireless presentation systems from Barco Belgium. A command injection vulnerability exists in the ClickShare CSM-1 Base Unit using firmware versions prior to 1.7.0.3 and the ClickShare CSC-1 Base Unit...

CVE-2017-12460

An issue was discovered in Barco ClickShare CSM-1 firmware before v1.7.0.3 and CSC-1 firmware before v1.10.0.10. An authenticated user can manage the wallpaper collection in the webUI to be shown as background on the ClickShare product. By uploading a wallpaper with a specially crafted name, an...

CVE-2017-9377

A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device...

CVE-2017-12460

An issue was discovered in Barco ClickShare CSM-1 firmware before v1.7.0.3 and CSC-1 firmware before v1.10.0.10. An authenticated user can manage the wallpaper collection in the webUI to be shown as background on the ClickShare product. By uploading a wallpaper with a specially crafted name, an...

CVE-2017-9377

A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device...

Design/Logic Flaw

An issue was discovered in Barco ClickShare CSM-1 firmware before v1.7.0.3 and CSC-1 firmware before v1.10.0.10. An authenticated user can manage the wallpaper collection in the webUI to be shown as background on the ClickShare product. By uploading a wallpaper with a specially crafted name, an...

Command injection

A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device...

CVE-2017-9377

A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device...

CVE-2017-9377

Barco ClickShare Base Unit devices (CSM-1 firmware before 1.7.0.3; CSC-1 firmware before 1.10.0.10) are affected by CVE-2017-9377. A command injection vulnerability exists that an attacker with access to the product’s web API can exploit to completely compromise the affected device. The available...

CVE-2017-12460

Barco ClickShare CSM-1 firmware prior to 1.7.0.3 and CSC-1 firmware prior to 1.10.0.10 are affected. An authenticated user can manage the wallpaper collection via the webUI and, by uploading a wallpaper with a specially crafted name, trigger HTML injection due to non-neutralized output. Impact is...

PT-2017-12560

Name of the Vulnerable Software and Affected Versions Barco ClickShare CSM-1 versions prior to 1.7.0.3 Barco ClickShare CSC-1 versions prior to 1.10.0.10 Description An issue allows an authenticated user to trigger an HTML injection by uploading a wallpaper with a specially crafted name to the...

PT-2017-18887

Name of the Vulnerable Software and Affected Versions Barco ClickShare Base Unit devices with CSM-1 firmware versions prior to 1.7.0.3 Barco ClickShare Base Unit devices with CSC-1 firmware versions prior to 1.10.0.10 Description A command injection issue was identified, allowing an attacker with...

CVE-2017-9377: Improper Neutralization of Special Elements used in an OS Command

A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device...