Insufficient Credential Protection in Barco ClickShare Button R9861500D01

CVE-2019-18828

What is CVE-2019-18828?

The Barco ClickShare Button R9861500D01 is susceptible to vulnerabilities due to its use of weak passwords for the root account on its embedded Linux system. This weakness is particularly concerning as it involves insufficiently protected credentials that could potentially be exploited, although the debug interfaces providing access to these credentials are not enabled by default in production devices. Older versions prior to 1.9.0 are at risk, and users are encouraged to update their devices to mitigate this security flaw.

References