CVE-2017-9377
High
Description
A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device.
SeverityHigh
CVSS8.8
Exploit probability—
ProductBarco Clickshare Csm-1 Firmware
PublishedOct 30, 2017
First seenOct 30, 2017
How to fix
Update
- barco clickshare_csm-1_firmware1.7.0.3 or later
- barco clickshare_csc-1_firmware1.10.0.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| barco clickshare_csm-1_firmware | v < 1.7.0.3 | 1.7.0.3 |
| barco clickshare_csc-1_firmware | v < 1.10.0.10 | 1.10.0.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.