Vulnerability Details CVE-2016-3149
Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execute arbitrary code via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.142
EPSS Ranking 94.0%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
- http://packetstormsecurity.com/files/139713/Barco-ClickShare-XSS-Remote-Code-Execution-Path-Traversal.html
- http://www.securityfocus.com/archive/1/539754/100/0/threaded
- http://www.securityfocus.com/bid/94323
- http://packetstormsecurity.com/files/139713/Barco-ClickShare-XSS-Remote-Code-Execution-Path-Traversal.html
- http://www.securityfocus.com/archive/1/539754/100/0/threaded
- http://www.securityfocus.com/bid/94323
Products affected by CVE-2016-3149
-
cpe:2.3:h:barco:clickshare_csc-1:-
-
cpe:2.3:h:barco:clickshare_csm-1:-
-
cpe:2.3:o:barco:clickshare_csc-1_firmware:01.09.02.03
-
cpe:2.3:o:barco:clickshare_csm-1_firmware:01.06.01.04