Vulnerability-Lookup

CNVD-2020-22807

Vulnerability from cnvd - Published: 2020-04-14

Title

Barco ClickShare Button R9861500D01输入验证错误漏洞

Description

Barco ClickShare Button R9861500D01是比利时巴可（Barco）公司的一款用于演示系统的无线控制设备。 Barco ClickShare Button R9861500D01 1.9.0之前版本中存在安全漏洞，该漏洞源于程序在使用UBIFS分区上的可变内容之前，未能对其进行完整性检查。攻击者可利用该漏洞向设备开设后门并将特制的数据呈现给用户。

Severity

高

Patch Name

Barco ClickShare Button R9861500D01输入验证错误漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，详情请关注厂商主页： https://www.barco.com

Reference

https://www.barco.com/en/clickshare/firmware-update

Impacted products

Name
Barco Barco ClickShare Button R9861500D01 <1.9.0

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-18824",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2019-18824"
    }
  },
  "description": "Barco ClickShare Button R9861500D01\u662f\u6bd4\u5229\u65f6\u5df4\u53ef\uff08Barco\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u7528\u4e8e\u6f14\u793a\u7cfb\u7edf\u7684\u65e0\u7ebf\u63a7\u5236\u8bbe\u5907\u3002\n\nBarco ClickShare Button R9861500D01 1.9.0\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5728\u4f7f\u7528UBIFS\u5206\u533a\u4e0a\u7684\u53ef\u53d8\u5185\u5bb9\u4e4b\u524d\uff0c\u672a\u80fd\u5bf9\u5176\u8fdb\u884c\u5b8c\u6574\u6027\u68c0\u67e5\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5411\u8bbe\u5907\u5f00\u8bbe\u540e\u95e8\u5e76\u5c06\u7279\u5236\u7684\u6570\u636e\u5448\u73b0\u7ed9\u7528\u6237\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8be6\u60c5\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\uff1a\r\nhttps://www.barco.com",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-22807",
  "openTime": "2020-04-14",
  "patchDescription": "Barco ClickShare Button R9861500D01\u662f\u6bd4\u5229\u65f6\u5df4\u53ef\uff08Barco\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u7528\u4e8e\u6f14\u793a\u7cfb\u7edf\u7684\u65e0\u7ebf\u63a7\u5236\u8bbe\u5907\u3002\r\n\r\nBarco ClickShare Button R9861500D01 1.9.0\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5728\u4f7f\u7528UBIFS\u5206\u533a\u4e0a\u7684\u53ef\u53d8\u5185\u5bb9\u4e4b\u524d\uff0c\u672a\u80fd\u5bf9\u5176\u8fdb\u884c\u5b8c\u6574\u6027\u68c0\u67e5\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5411\u8bbe\u5907\u5f00\u8bbe\u540e\u95e8\u5e76\u5c06\u7279\u5236\u7684\u6570\u636e\u5448\u73b0\u7ed9\u7528\u6237\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Barco ClickShare Button R9861500D01\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Barco Barco ClickShare Button R9861500D01 \u003c1.9.0"
  },
  "referenceLink": "https://www.barco.com/en/clickshare/firmware-update",
  "serverity": "\u9ad8",
  "submitTime": "2019-12-25",
  "title": "Barco ClickShare Button R9861500D01\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e"
}

CVE-2019-18824 (GCVE-0-2019-18824)

Vulnerability from cvelistv5 – Published: 2019-12-17 13:47 – Updated: 2024-08-05 02:02

Summary

Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

4 references

URL	Tags
https://www.barco.com/en/clickshare/firmware-update	x_refsource_MISC
https://labs.f-secure.com/advisories/multiple-vul…	x_refsource_MISC
https://www.barco.com/en/clickshare/support/softw…	x_refsource_CONFIRM
https://www.barco.com/en/clickshare/support/softw…	x_refsource_CONFIRM

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:02:39.475Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.barco.com/en/clickshare/firmware-update"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.barco.com/en/clickshare/support/software/R33050070?majorVersion=01\u0026minorVersion=10\u0026patchVersion=00\u0026buildVersion=013"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.barco.com/en/clickshare/support/software/R33050069?majorVersion=01\u0026minorVersion=10\u0026patchVersion=00\u0026buildVersion=013"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-08-13T16:37:24.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.barco.com/en/clickshare/firmware-update"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.barco.com/en/clickshare/support/software/R33050070?majorVersion=01\u0026minorVersion=10\u0026patchVersion=00\u0026buildVersion=013"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.barco.com/en/clickshare/support/software/R33050069?majorVersion=01\u0026minorVersion=10\u0026patchVersion=00\u0026buildVersion=013"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-18824",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.barco.com/en/clickshare/firmware-update",
              "refsource": "MISC",
              "url": "https://www.barco.com/en/clickshare/firmware-update"
            },
            {
              "name": "https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/",
              "refsource": "MISC",
              "url": "https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/"
            },
            {
              "name": "https://www.barco.com/en/clickshare/support/software/R33050070?majorVersion=01\u0026minorVersion=10\u0026patchVersion=00\u0026buildVersion=013",
              "refsource": "CONFIRM",
              "url": "https://www.barco.com/en/clickshare/support/software/R33050070?majorVersion=01\u0026minorVersion=10\u0026patchVersion=00\u0026buildVersion=013"
            },
            {
              "name": "https://www.barco.com/en/clickshare/support/software/R33050069?majorVersion=01\u0026minorVersion=10\u0026patchVersion=00\u0026buildVersion=013",
              "refsource": "CONFIRM",
              "url": "https://www.barco.com/en/clickshare/support/software/R33050069?majorVersion=01\u0026minorVersion=10\u0026patchVersion=00\u0026buildVersion=013"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-18824",
    "datePublished": "2019-12-17T13:47:47.000Z",
    "dateReserved": "2019-11-07T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:02:39.475Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2020-22807

CVE-2019-18824 (GCVE-0-2019-18824)

Tags

Sightings

Nomenclature

Related by attack behaviour