Browse CVEs

HIGH 7.5 CVE-2022-26975 Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication. Control Room Management Suite 3.14.1+ Fix from $1,9502022-06-02 MEDIUM 6.1 CVE-2022-26974 Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a file upload mechanism. Lack of input san… Control Room Management Suite 3.14.1+ Fix from $1,6002022-06-02 MEDIUM 6.1 CVE-2022-26977 Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of i… Control Room Management Suite 3.14.1+ Fix from $1,6002022-06-02 MEDIUM 6.1 CVE-2022-26978 Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checklogin.jsp endpoint. The os_use… Control Room Management Suite 3.14.1+ Fix from $1,6002022-06-02 MEDIUM 5.4 CVE-2022-26976 Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of i… Control Room Management Suite 3.14.1+ Fix from $1,6002022-06-02 MEDIUM 5.3 CVE-2022-26973 Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. By tweaki… Control Room Management Suite 3.14.1+ Fix from $1,6002022-06-02 MEDIUM 6.1 CVE-2022-26972 Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint. The URL parameter… Control Room Management Suite 3.14.1+ Fix from $1,6002022-06-02 MEDIUM 5.3 CVE-2022-26971 Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. This uplo… Control Room Management Suite 3.14.1+ Fix from $1,6002022-06-02 HIGH 7.5 CVE-2022-26233EPSS 15% Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensi… Control Room Management Suite after 2.9 Fix from $1,9502022-04-03 HIGH 8.8 CVE-2021-38142 Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades. An attacker on the local network can achie… Mirrorop Windows Sender 2.5.3.65+ Fix from $1,9502021-09-07 HIGH 7.8 CVE-2021-35482 An issue was discovered in Barco MirrorOp Windows Sender before 2.5.4.70. An attacker in the local network is able to achieve Remote Code Execution (… Mirrorop Windows Sender 2.5.4.70+ Fix from $1,9502021-07-21 HIGH 7.2 CVE-2020-17502 Barco TransForm N before 3.8 allows Command Injection (issue 2 of 4). The NDN-210 has a web administration panel which is made available over https. … Transform N 3.8+ Fix from $1,9502021-01-08 HIGH 7.2 CVE-2020-17503 The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users… Transform N 3.8+ Fix from $1,9502021-01-08 HIGH 7.2 CVE-2020-17504 The NDN-210 has a web administration panel which is made available over https. There is a command injection issue that will allow authenticated users… Transform N 3.8+ Fix from $1,9502021-01-08 CRITICAL 9.8 CVE-2020-17500 Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows Command Injection (issue 1 of 4). The NDN-210 has a web ad… Transform N 3.8+ Fix from $2,3002021-01-07 CRITICAL 9.8 CVE-2020-28329 Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image. A malicious … Wepresent Wipg 1600w Firmware No fix yet Fix from $2,3002020-11-24 CRITICAL 9.8 CVE-2020-28332 Barco wePresent WiPG-1600W devices download code without an Integrity Check. Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19. The Barco we… Wepresent Wipg 1600w Firmware No fix yet Fix from $2,3002020-11-24 CRITICAL 9.8 CVE-2020-28333 Barco wePresent WiPG-1600W devices allow Authentication Bypass. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-1600W web interface does not u… Wepresent Wipg 1600w Firmware No fix yet Fix from $2,3002020-11-24 CRITICAL 9.8 CVE-2020-28334 Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2). Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19. The Barco w… Wepresent Wipg 1600w Firmware No fix yet Fix from $2,3002020-11-24 MEDIUM 6.5 CVE-2020-28330 Barco wePresent WiPG-1600W devices have Unprotected Transport of Credentials. Affected Version(s): 2.5.1.8. An attacker armed with hardcoded API cred… Wepresent Wipg 1600w Firmware No fix yet Fix from $1,6002020-11-24 HIGH 7.5 CVE-2020-28331 Barco wePresent WiPG-1600W devices have Improper Access Control. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-1600W device has an SSH daemo… Wepresent Wipg 1600w Firmware No fix yet Fix from $1,9502020-11-24 MEDIUM 5.9 CVE-2019-18833 Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information exposure (issue 2 of 2).. The encryption key of the media content which is… Clickshare Button R9861500d01 Firmware 1.9.0+ Fix from $1,6002019-12-17 HIGH 8.1 CVE-2019-18832 Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management. The ClickShare Button implements encryption at rest w… Clickshare Button R9861500d01 Firmware 1.9.0+ Fix from $1,9502019-12-17 HIGH 7.8 CVE-2019-18829 Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The Barco signed 'Clickshare_For_Windows.exe' … Clickshare Button R9861500d01 Firmware 1.10.0.13+ Fix from $1,9502019-12-17 HIGH 7.5 CVE-2019-18825 Barco ClickShare Huddle CS-100 devices before 1.9.0 and CSE-200 devices before 1.9.0 have incorrect Credentials Management. The ClickShare Base Unit … Clickshare Cs 100 Huddle Firmware 1.9.0+ Fix from $1,9502019-12-17 MEDIUM 6.6 CVE-2019-18824 Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the inte… Clickshare Button R9861500d01 Firmware 1.10.0.13+ Fix from $1,6002019-12-17 CRITICAL 9.8 CVE-2019-18830 Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection. The embedded 'dongle_bridge' program used to expose the function… Clickshare Cs 100 Firmware 1.9.0+ Fix from $2,3002019-12-16 MEDIUM 6.8 CVE-2019-18828 Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials. The root account (present for access via debug in… Clickshare Cs 100 Firmware 1.9.0+ Fix from $1,6002019-12-16 MEDIUM 5.3 CVE-2019-18831 Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information Exposure. The encrypted ClickShare Button firmware contains the private ke… Clickshare Cs 100 Firmware 1.9.0+ Fix from $1,6002019-12-16 CRITICAL 9.8 CVE-2019-18826 Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate's Chain of Trust. The embedded 'dongle_bridge' prog… Clickshare Cs 100 Firmware 1.9.0+ Fix from $2,3002019-12-16