Barco vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2022-26975 Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication.High 7.5 · Jun 2, 2022
• CVE-2022-26233 Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive informHigh 7.5 · Apr 3, 2022
• CVE-2021-38142 Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades.High 8.8 · Sep 7, 2021
• CVE-2021-35482 An issue was discovered in Barco MirrorOp Windows Sender before 2.5.4.70.High 7.8 · Jul 21, 2021
• CVE-2020-17504 The NDN-210 has a web administration panel which is made available over https.High 7.2 · Jan 8, 2021
• CVE-2020-17503 The NDN-210 has a web administration panel which is made available over https.High 7.2 · Jan 8, 2021
• CVE-2020-17502 Barco TransForm N before 3.8 allows Command Injection (issue 2 of 4).High 7.2 · Jan 8, 2021
• CVE-2020-17500 Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows Command Injection (issue 1 of 4).Critical 9.8 · Jan 7, 2021
• CVE-2020-28329 Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image.Critical 9.8 · Nov 24, 2020
• CVE-2020-28334 Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2).Critical 9.8 · Nov 24, 2020
• CVE-2020-28333 Barco wePresent WiPG-1600W devices allow Authentication Bypass.Critical 9.8 · Nov 24, 2020
• CVE-2020-28332 Barco wePresent WiPG-1600W devices download code without an Integrity Check.Critical 9.8 · Nov 24, 2020
• CVE-2020-28331 Barco wePresent WiPG-1600W devices have Improper Access Control.High 7.5 · Nov 24, 2020
• CVE-2019-18832 Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management.High 8.1 · Dec 17, 2019
• CVE-2019-18829 Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check.High 7.8 · Dec 17, 2019
• CVE-2019-18825 Barco ClickShare Huddle CS-100 devices before 1.9.0 and CSE-200 devices before 1.9.0 have incorrect Credentials Management.High 7.5 · Dec 17, 2019
• CVE-2019-18830 Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection.Critical 9.8 · Dec 16, 2019
• CVE-2019-18826 Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate's Chain of Trust.Critical 9.8 · Dec 16, 2019
• CVE-2018-10943 An issue was discovered on Barco ClickShare CSE-200 and CS-100 Base Units with firmware before 1.6.0.3.High 7.5 · Jul 10, 2018
• CVE-2017-9377 A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10.High 8.8 · Oct 30, 2017
• CVE-2016-3152 Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware imageCritical 9.8 · Jan 12, 2017
• CVE-2016-3151 Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firHigh 7.5 · Jan 12, 2017
• CVE-2016-3149 Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execute arbitrary code viCritical 9.8 · Jan 12, 2017