CVE-2019-18824

Exploit

EPSS 0.07%
Veröffentlicht 17.12.2019 14:15:17
Zuletzt bearbeitet 21.11.2024 04:33:39
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Barco ≫ Clickshare Button R9861500d01 Firmware Version < 1.10.0.13

Barco ≫ Clickshare Button R9861500d01 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.07%	0.225

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.6	0.7	5.9	CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	6.9	3.4	10	AV:L/AC:M/Au:N/C:C/I:C/A:C

CWE-345 Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

https://www.barco.com/en/clickshare/firmware-update

Vendor Advisory

https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/

Third Party Advisory

Exploit

https://www.barco.com/en/clickshare/support/software/R33050069?majorVersion=01&minorVersion=10&patchVersion=00&buildVersion=013

Vendor Advisory

https://www.barco.com/en/clickshare/support/software/R33050070?majorVersion=01&minorVersion=10&patchVersion=00&buildVersion=013

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-18824

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-18824

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-18824

EUVD