CVE-2016-3152
critical
CVSS v3
9.8
CVSS v2
5.0
VIR risk
9.8
Description
Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware image.
Predictions
Exploit likelihood
97%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
References
- http://packetstormsecurity.com/files/139713/Barco-ClickShare-XSS-Remote-Code-Execution-Path-Traversal.html
- http://www.securityfocus.com/archive/1/539754/100/0/threaded
- http://www.securityfocus.com/bid/94326
- http://packetstormsecurity.com/files/139713/Barco-ClickShare-XSS-Remote-Code-Execution-Path-Traversal.html
- http://www.securityfocus.com/archive/1/539754/100/0/threaded
- http://www.securityfocus.com/bid/94326
CWEs
CWE-200
Verify integrity in audit chain (admin only). AS-IS.