CVE-2024-53919

Published: Dec 10, 2024Modified: Jun 17, 2026Deferred

7.6

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 6.0

Source: MITRE (Secondary)

Description

An injection vulnerability in Barco ClickShare CX-30/20, C-5/10, and ClickShare Bar Pro and Core models, running firmware before 2.21.1, allows physically proximate attackers or local admins to the webUI to trigger OS-level command execution as root.

Related CWEs

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (2)

https://cwe.mitre.org/data/definitions/78.html

Source: cve@mitre.org

https://www.barco.com/en/support/knowledge-base/15008-clickshare-cve-2024-53919

Source: cve@mitre.org

Timeline

No history available yet.