Improper Certificate Chain Validation in Barco ClickShare Button
CVE-2019-18826

9.8CRITICAL

Key Information:

Vendor

Barco

Status
Clickshare Cs-100 Firmware
Vendor
CVE Published:
16 December 2019

What is CVE-2019-18826?

Barco ClickShare Button R9861500D01 devices prior to version 1.9.0 are susceptible to a vulnerability where the embedded 'dongle_bridge' program fails to adequately validate the entire certificate chain. This lack of validation can lead to potential security risks, as unauthorized entities may exploit this weakness to manipulate data or gain unauthorized access through the USB host functionalities.

References

https://www.barco.com/en/clickshare/firmware-update
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.