CVE-2017-9377

A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
VendorProductVersion
barcoclickshare_csm-1_firmware
𝑥
< 1.7.0.3
barcoclickshare_csc-1_firmware
𝑥
< 1.10.0.10
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/101617
https://www.barco.com/en/Support/software/R33050037
https://www.barco.com/en/support/software/R33050020
https://www.contextis.com/resources/advisories/cve-2017-9377
http://www.securityfocus.com/bid/101617
https://www.barco.com/en/Support/software/R33050037
https://www.barco.com/en/support/software/R33050020
https://www.contextis.com/resources/advisories/cve-2017-9377