Information Exposure Vulnerability in Barco ClickShare Buttons

CVE-2019-18833

What is CVE-2019-18833?

Barco ClickShare Button devices, specifically the R9861500D01 model versions prior to 1.9.0, expose sensitive information due to improper encryption key handling. When media content is shared between the ClickShare Button and its associated Base Unit, the encryption key is generated randomly for each session and transmitted over a TLS connection. If an attacker successfully executes a Man-in-the-Middle attack on the TLS channel, they can intercept the encryption key, resulting in unauthorized access to the streamed content.

References