CVE-2021-35482

CVE-2021-35482 affects Barco MirrorOp Windows Sender prior to 2.5.4.70. An attacker on the local network can trigger Remote Code Execution on any device that connects to a WePresent presentation system, executing with the local user’s privileges. The issue is tied to Barco’s WePresent/WiPG-1600W ...

CVE-2021-38142

Barco MirrorOp Windows Sender prior to version 2.5.3.65 is vulnerable due to a cleartext HTTP upgrade mechanism that is not protected with TLS. An attacker on the local network can abuse this insecure upgrade process to achieve remote code execution on any computer attempting to update Windows Se...