CVE-2024-53919
High
Description
An injection vulnerability in Barco ClickShare CX-30/20, C-5/10, and ClickShare Bar Pro and Core models, running firmware before 2.21.1, allows physically proximate attackers or local admins to the webUI to trigger OS-level command execution as root.
SeverityHigh
CVSS7.6
Exploit probability39. percentile0.4%
ProductClickShare CX-30/20
PublishedDec 10, 2024
First seenDec 10, 2024
Weakness typeCWE-77Command injection
How to fix
Update
- Barco ClickShare CX-30/202.21.1 or later
- Barco C-5/102.21.1 or later
- Barco ClickShare Bar Pro2.21.1 or later
- Barco Core models2.21.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Barco ClickShare CX-30/20 | No range specified | 2.21.1 |
| Barco C-5/10 | No range specified | 2.21.1 |
| Barco ClickShare Bar Pro | No range specified | 2.21.1 |
| Barco Core models | No range specified | 2.21.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.