Unscored CVE-2017-9377 EUVD-2017-18312GHSA-2pp4-6872-69xx

A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.…

Published Oct 30, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device.

References

https://www.barco.com/en/support/software/R33050020
https://www.barco.com/en/Support/software/R33050037
https://www.contextis.com/resources/advisories/cve-2017-9377
101617 vdb-entry