Medium severity · published Dec 17, 2019
CVE-2019-18824
Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check
6.6
CVSS
0.3%
EPSS
No
On KEV
Description
Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CB
Clickshare Button R9861500d01 Firmware · Barco
before 1.10.0.13 · source: NVD
Affected product
CB
Clickshare Button R9861500d01 Firmware
Barco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-18824
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-18824
Exploit
https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/
Vendor Advisory
https://www.barco.com/en/clickshare/firmware-update
Vendor Advisory
https://www.barco.com/en/clickshare/support/software/R33050069?majorVersion=01&minorVersion=10&patchVersion=00&buildVersion=013
Vendor Advisory
https://www.barco.com/en/clickshare/support/software/R33050070?majorVersion=01&minorVersion=10&patchVersion=00&buildVersion=013
More from Clickshare Button R9861500d01 Firmware
8.1
CVE-2019-18832
Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management
7.8
CVE-2019-18829
Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check
5.9
CVE-2019-18833
Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information exposure (issue 2 of 2)