← Back

CVE-2019-18828

nvd nist
Published: Dec 16, 2019Modified: Nov 21, 2024

JSON object

Loading...
6.8
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.9 / Impact: 5.9
Source: NVD

Description

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials. The root account (present for access via debug interfaces, which are by default not enabled on production devices) of the embedded Linux on the ClickShare Button is using a weak password.

Affected (4)

Barco
3 products
Clickshare Cs 100 Firmware
Clickshare Cse 200+ Firmware
Clickshare Cse 800 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Clickshare Cs 100 Firmware
Before 1.9.0
Running on/withPlatform Versions
Barco
Clickshare Cs 100
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Clickshare Cse 200 Firmware
Before 1.9.0
Running on/withPlatform Versions
Barco
Clickshare Cse 200
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Clickshare Cse 200+ Firmware
Before 1.9.0
Running on/withPlatform Versions
Barco
Clickshare Cse 200+
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Clickshare Cse 800 Firmware
Before 1.9.0
Running on/withPlatform Versions
Barco
Clickshare Cse 800
All versions

Related CWEs

CWE-521
Weak Password Requirements
The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.

References (12)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Product
Source: cve@mitre.org
ProductVendor Advisory
Source: cve@mitre.org
ProductVendor Advisory
Source: cve@mitre.org
ProductVendor Advisory
Source: cve@mitre.org
ProductVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Product
Source: af854a3a-2127-422b-91ae-364da2661108
ProductVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ProductVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ProductVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ProductVendor Advisory

Timeline

No history available yet.