CVE-2017-9377

Опубликовано: 30 окт. 2017

Источник: nvd

CVSS3: 8.8

CVSS2: 9

EPSS Низкий

Описание

A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device.

Ссылки

http://www.securityfocus.com/bid/101617
Third Party Advisory
VDB Entry
https://www.barco.com/en/Support/software/R33050037
Patch
Release Notes
https://www.barco.com/en/support/software/R33050020
Patch
Release Notes
https://www.contextis.com/resources/advisories/cve-2017-9377
Third Party Advisory
http://www.securityfocus.com/bid/101617
Third Party Advisory
VDB Entry
https://www.barco.com/en/Support/software/R33050037
Patch
Release Notes
https://www.barco.com/en/support/software/R33050020
Patch
Release Notes
https://www.contextis.com/resources/advisories/cve-2017-9377
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:barco:clickshare_csm-1_firmware:*:*:*:*:*:*:*:*

Версия до 1.7.0.3 (исключая)

cpe:2.3:h:barco:clickshare_csm-1:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:barco:clickshare_csc-1_firmware:*:*:*:*:*:*:*:*

Версия до 1.10.0.10 (исключая)

cpe:2.3:h:barco:clickshare_csc-1:-:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.0571

Низкий

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

GHSA-2pp4-6872-69xx