CVE-2024-53919

An injection vulnerability in Barco ClickShare CX-30/20, C-5/10, and ClickShare Bar Pro and Core models, running firmware before 2.21.1, allows physically…

High · published December 10, 2024

CVSS v3.1
7.6
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

An injection vulnerability in Barco ClickShare CX-30/20, C-5/10, and ClickShare Bar Pro and Core models, running firmware before 2.21.1, allows physically proximate attackers or local admins to the webUI to trigger OS-level command execution as root.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AC:L/AV:P/A:H/C:H/I:H/PR:N/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00446 · 37.7th percentile
Published
2024-12-10T00:00Z
EPSS history
Timeline
  • 10 DEC 00:00Z
    An injection vulnerability in Barco ClickShare CX-30/20, C-5/10, and ClickShare Bar Pro and Core models, running firmware before 2.21.1, allows physically…
    cvelistv5