CVE-2019-18824

Опубликовано: 17 дек. 2019

Источник: nvd

CVSS3: 6.6

CVSS2: 6.9

EPSS Низкий

Описание

Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used.

Ссылки

https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/
Exploit
Third Party Advisory
https://www.barco.com/en/clickshare/firmware-update
Vendor Advisory
https://www.barco.com/en/clickshare/support/software/R33050069?majorVersion=01&minorVersion=10&patchVersion=00&buildVersion=013
Vendor Advisory
https://www.barco.com/en/clickshare/support/software/R33050070?majorVersion=01&minorVersion=10&patchVersion=00&buildVersion=013
Vendor Advisory
https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/
Exploit
Third Party Advisory
https://www.barco.com/en/clickshare/firmware-update
Vendor Advisory
https://www.barco.com/en/clickshare/support/software/R33050069?majorVersion=01&minorVersion=10&patchVersion=00&buildVersion=013
Vendor Advisory
https://www.barco.com/en/clickshare/support/software/R33050070?majorVersion=01&minorVersion=10&patchVersion=00&buildVersion=013
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:barco:clickshare_button_r9861500d01_firmware:*:*:*:*:*:*:*:*

Версия до 1.10.0.13 (исключая)

cpe:2.3:h:barco:clickshare_button_r9861500d01:-:*:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00073

Низкий

6.6 Medium

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-345

Связанные уязвимости

GHSA-34cm-4327-j9m2

github

больше 3 лет назад

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used.