Skip to content
Noroxi

Barco records

40 published records for vendor barco.

Researcher profile

Entered KEV
1 · 2.5%
Weaponized
1 · 2.5%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
1081 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

40 records
  • CVE-2019-3929
    99Now

    The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1

    CriticalCVSS 9.8KEVWeaponizedEPSS 98%

    crestron · am-100 firmwareApr 30, 2019

  • CVE-2016-3149
    41Plan

    Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execu

    CriticalCVSS 9.8No exploitEPSS 7%

    barco · clickshare csc-1 firmwareJan 12, 2017

  • CVE-2019-3930
    41Plan

    The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1

    CriticalCVSS 9.8No exploitEPSS 6%

    crestron · am-100 firmwareApr 30, 2019

  • CVE-2020-28334
    40Plan

    Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2).

    CriticalCVSS 9.8No exploitEPSS 4%

    barco · wepresent wipg-1600w firmwareNov 24, 2020

  • CVE-2019-18830
    40Plan

    Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection.

    CriticalCVSS 9.8No exploitEPSS 4%

    barco · clickshare cs-100 firmwareDec 16, 2019

  • CVE-2020-17500
    40Plan

    Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows Command Injection (issue 1 of 4).

    CriticalCVSS 9.8No exploitEPSS 4%

    barco · transform nJan 7, 2021

  • CVE-2020-28333
    40Plan

    Barco wePresent WiPG-1600W devices allow Authentication Bypass.

    CriticalCVSS 9.8No exploitEPSS 3%

    barco · wepresent wipg-1600w firmwareNov 24, 2020

  • CVE-2016-3152
    40Plan

    Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extractin

    CriticalCVSS 9.8No exploitEPSS 2%

    barco · clickshare csc-1 firmwareJan 12, 2017

  • CVE-2020-28329
    39Monitor

    Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image.

    CriticalCVSS 9.8No exploitEPSS 1%

    barco · wepresent wipg-1600w firmwareNov 24, 2020

  • CVE-2020-28332
    39Monitor

    Barco wePresent WiPG-1600W devices download code without an Integrity Check.

    CriticalCVSS 9.8No exploitEPSS 1%

    barco · wepresent wipg-1600w firmwareNov 24, 2020

  • CVE-2019-18826
    39Monitor

    Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate's Chain of Trust.

    CriticalCVSS 9.8No exploitEPSS 0%

    barco · clickshare cs-100 firmwareDec 16, 2019

  • CVE-2017-9377
    36Monitor

    A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0

    HighCVSS 8.8No exploitEPSS 4%

    barco · clickshare csm-1 firmwareOct 30, 2017

  • CVE-2022-26233
    35Monitor

    Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to acc

    HighCVSS 7.5Proof of conceptEPSS 15%

    barco · control room management suiteApr 3, 2022

  • CVE-2021-38142
    35Monitor

    Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades.

    HighCVSS 8.8No exploitEPSS 0%

    barco · mirrorop windows senderSep 7, 2021

  • CVE-2019-18832
    32Monitor

    Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management.

    HighCVSS 8.1No exploitEPSS 0%

    barco · clickshare button r9861500d01 firmwareDec 17, 2019

  • CVE-2016-3151
    31Monitor

    Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CS

    HighCVSS 7.5No exploitEPSS 4%

    barco · clickshare csc-1 firmwareJan 12, 2017

  • CVE-2020-28331
    31Monitor

    Barco wePresent WiPG-1600W devices have Improper Access Control.

    HighCVSS 7.5No exploitEPSS 1%

    barco · wepresent wipg-1600w firmwareNov 24, 2020

  • CVE-2021-35482
    31Monitor

    An issue was discovered in Barco MirrorOp Windows Sender before 2.5.4.70.

    HighCVSS 7.8No exploitEPSS 0%

    barco · mirrorop windows senderJul 21, 2021

  • CVE-2019-18829
    31Monitor

    Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check.

    HighCVSS 7.8No exploitEPSS 0%

    barco · clickshare button r9861500d01 firmwareDec 17, 2019

  • CVE-2018-10943
    30Monitor

    An issue was discovered on Barco ClickShare CSE-200 and CS-100 Base Units with firmware before 1.6.0.3.

    HighCVSS 7.5No exploitEPSS 1%

    barco · clickshare cse-200 firmwareJul 10, 2018

  • CVE-2022-26975
    30Monitor

    Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication.

    HighCVSS 7.5No exploitEPSS 1%

    barco · control room management suiteJun 2, 2022

  • CVE-2019-18825
    30Monitor

    Barco ClickShare Huddle CS-100 devices before 1.9.0 and CSE-200 devices before 1.9.0 have incorrect Credentials Management.

    HighCVSS 7.5No exploitEPSS 0%

    barco · clickshare cs-100 huddle firmwareDec 17, 2019

  • CVE-2020-17502
    29Monitor

    Barco TransForm N before 3.8 allows Command Injection (issue 2 of 4).

    HighCVSS 7.2No exploitEPSS 2%

    barco · transform nJan 8, 2021

  • CVE-2020-17503
    29Monitor

    The NDN-210 has a web administration panel which is made available over https.

    HighCVSS 7.2No exploitEPSS 2%

    barco · transform nJan 8, 2021

  • CVE-2020-17504
    29Monitor

    The NDN-210 has a web administration panel which is made available over https.

    HighCVSS 7.2No exploitEPSS 2%

    barco · transform nJan 8, 2021