7.2

CVE-2019-18828

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials. The root account (present for access via debug interfaces, which are by default not enabled on production devices) of the embedded Linux on the ClickShare Button is using a weak password.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Barco ≫ Clickshare Cs-100 Firmware Version < 1.9.0
   Barco ≫ Clickshare Cs-100 Version -
Barco ≫ Clickshare Cse-200 Firmware Version < 1.9.0
   Barco ≫ Clickshare Cse-200 Version -
Barco ≫ Clickshare Cse-200+ Firmware Version < 1.9.0
   Barco ≫ Clickshare Cse-200+ Version -
Barco ≫ Clickshare Cse-800 Firmware Version < 1.9.0
   Barco ≫ Clickshare Cse-800 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.39% 0.313
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 0.9 5.9
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-521 Weak Password Requirements

The product does not require that users should have strong passwords.

https://www.barco.com/en/clickshare/firmware-update
Product
https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/
Third Party Advisory
https://www.barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
Vendor Advisory
Product
https://www.barco.com/en/support/software/R33050070?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
Vendor Advisory
Product
https://www.barco.com/en/support/software/R33050095?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
Vendor Advisory
Product
https://www.barco.com/en/support/software/R33050125?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
Vendor Advisory
Product