CPE Details
Barco ClickShare CSC-1 Firmware 01.09.05.02
01.09.05.02
2017-01-17
18h24 +00:00
18h24 +00:00
2021-05-26
16h50 +00:00
16h50 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:o:barco:clickshare_csc-1_firmware:01.09.05.02:*:*:*:*:*:*:*
Informations
Vendor
barcoProduct
clickshare_csc-1_firmwareVersion
01.09.05.02Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| An issue was discovered in Barco ClickShare CSM-1 firmware before v1.7.0.3 and CSC-1 firmware before v1.10.0.10. An authenticated user can manage the wallpaper collection in the webUI to be shown as background on the ClickShare product. By uploading a wallpaper with a specially crafted name, an HTML injection can be triggered as special characters are not neutralized before output. | 5.4 |
Medium |
||
| A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device. | 8.8 |
High |
||
| Cross-site scripting (XSS) vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 6.1 |
Medium |
