Injection Vulnerability in Barco ClickShare Products Allows OS-Level Command Execution

CVE-2024-53919

Summary

An injection vulnerability exists in multiple Barco ClickShare models, including CX-30, CX-20, C-5, C-10, Bar Pro, and Core, which are running firmware earlier than version 2.21.1. This vulnerability permits attackers who are physically near the device or local administrators to exploit the webUI, thereby executing OS-level commands as the root user. This security flaw highlights the importance of keeping firmware updated to mitigate potential risks associated with unauthorized command execution.

References