CVE-2019-18832

Опубликовано: 17 дек. 2019

Источник: nvd

CVSS3: 8.1

CVSS2: 6.8

EPSS Низкий

Описание

Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management. The ClickShare Button implements encryption at rest which uses a one-time programmable (OTP) AES encryption key. This key is shared across all ClickShare Buttons of model R9861500D01.

Ссылки

https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/
Exploit
Third Party Advisory
https://www.barco.com/en/clickshare/firmware-update
Vendor Advisory
https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/
Exploit
Third Party Advisory
https://www.barco.com/en/clickshare/firmware-update
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:barco:clickshare_button_r9861500d01_firmware:*:*:*:*:*:*:*:*

Версия до 1.9.0 (исключая)

cpe:2.3:h:barco:clickshare_button_r9861500d01:-:*:*:*:*:*:*:*

EPSS

Процентиль: 33%

0.0013

Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-327

Связанные уязвимости

GHSA-33hg-cqpj-624f

github

больше 3 лет назад