Barco Clickshare Cse-200 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Barco Clickshare Cse-200 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2019-18826 — CVSS 9.8 (critical): Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate's Chain of Trust. The embedded…
• CVE-2019-18830 — CVSS 9.8 (critical): Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection. The embedded 'dongle_bridge' program used to expose…
• CVE-2016-3151 — CVSS 7.5 (high): Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03…
• CVE-2018-10943 — CVSS 7.5 (high): An issue was discovered on Barco ClickShare CSE-200 and CS-100 Base Units with firmware before 1.6.0.3. Sending an arbitrary unexpected…
• CVE-2019-18825 — CVSS 7.5 (high): Barco ClickShare Huddle CS-100 devices before 1.9.0 and CSE-200 devices before 1.9.0 have incorrect Credentials Management. The ClickShare…
• CVE-2019-18828 — CVSS 6.8 (medium): Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials. The root account (present for access…
• CVE-2016-3150 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03…
• CVE-2019-18827 — CVSS 5.9 (medium): On Barco ClickShare Button R9861500D01 devices (before firmware version 1.9.0) JTAG access is disabled after ROM code execution. This means…
• CVE-2019-18831 — CVSS 5.3 (medium): Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information Exposure. The encrypted ClickShare Button firmware contains the…