[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fH9Lv_BLLNvVmRo4hWBmBnVUspvnR-b567k51aXWO6Zg":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":117,"kevVulnerabilities":169,"topProductsByCves":175,"seoMetadata":186,"meta":195},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":116},3115,"barco",27,40,1,99,"2022-06-02","b",[16,21,26,29,34,38,44,48,52,55,60,63,66,69,73,76,79,83,86,89,92,95,98,103,107,110,113],{"id":17,"product_name":18,"version_count":11,"cve_count":19,"kev_count":20,"last_cve_update":13},12773,"control_room_management_suite",9,0,{"id":22,"product_name":23,"version_count":24,"cve_count":19,"kev_count":20,"last_cve_update":25},12767,"clickshare_cse-200_firmware",22,"2019-12-17",{"id":27,"product_name":28,"version_count":20,"cve_count":19,"kev_count":20,"last_cve_update":25},12765,"clickshare_cse-200",{"id":30,"product_name":31,"version_count":20,"cve_count":32,"kev_count":11,"last_cve_update":33},12782,"wepresent_wipg-1600w",8,"2020-11-24",{"id":35,"product_name":36,"version_count":37,"cve_count":32,"kev_count":11,"last_cve_update":33},12783,"wepresent_wipg-1600w_firmware",4,{"id":39,"product_name":40,"version_count":41,"cve_count":42,"kev_count":20,"last_cve_update":43},12760,"clickshare_cs-100_firmware",19,6,"2019-12-16",{"id":45,"product_name":46,"version_count":20,"cve_count":42,"kev_count":20,"last_cve_update":47},12763,"clickshare_csc-1","2017-10-30",{"id":49,"product_name":50,"version_count":51,"cve_count":42,"kev_count":20,"last_cve_update":47},12764,"clickshare_csc-1_firmware",3,{"id":53,"product_name":54,"version_count":20,"cve_count":42,"kev_count":20,"last_cve_update":43},12759,"clickshare_cs-100",{"id":56,"product_name":57,"version_count":58,"cve_count":59,"kev_count":20,"last_cve_update":43},12770,"clickshare_cse-800_firmware",13,5,{"id":61,"product_name":62,"version_count":20,"cve_count":59,"kev_count":20,"last_cve_update":43},12766,"clickshare_cse-200\\+",{"id":64,"product_name":65,"version_count":42,"cve_count":59,"kev_count":20,"last_cve_update":43},12768,"clickshare_cse-200\\+_firmware",{"id":67,"product_name":68,"version_count":20,"cve_count":59,"kev_count":20,"last_cve_update":43},12769,"clickshare_cse-800",{"id":70,"product_name":71,"version_count":72,"cve_count":37,"kev_count":20,"last_cve_update":25},12758,"clickshare_button_r9861500d01_firmware",21,{"id":74,"product_name":75,"version_count":20,"cve_count":37,"kev_count":20,"last_cve_update":47},12771,"clickshare_csm-1",{"id":77,"product_name":78,"version_count":51,"cve_count":37,"kev_count":20,"last_cve_update":47},12772,"clickshare_csm-1_firmware",{"id":80,"product_name":81,"version_count":20,"cve_count":37,"kev_count":20,"last_cve_update":82},12776,"transform_ndn-210_lite","2021-01-08",{"id":84,"product_name":85,"version_count":20,"cve_count":37,"kev_count":20,"last_cve_update":82},12777,"transform_ndn-210_pro",{"id":87,"product_name":88,"version_count":20,"cve_count":37,"kev_count":20,"last_cve_update":82},12778,"transform_ndn-211_lite",{"id":90,"product_name":91,"version_count":20,"cve_count":37,"kev_count":20,"last_cve_update":82},12779,"transform_ndn-211_pro",{"id":93,"product_name":94,"version_count":20,"cve_count":37,"kev_count":20,"last_cve_update":25},12757,"clickshare_button_r9861500d01",{"id":96,"product_name":97,"version_count":11,"cve_count":37,"kev_count":20,"last_cve_update":82},12775,"transform_n",{"id":99,"product_name":100,"version_count":101,"cve_count":101,"kev_count":20,"last_cve_update":102},12774,"mirrorop_windows_sender",2,"2021-09-07",{"id":104,"product_name":105,"version_count":11,"cve_count":101,"kev_count":11,"last_cve_update":106},12781,"wepresent_wipg-1000p_firmware","2019-04-30",{"id":108,"product_name":109,"version_count":20,"cve_count":101,"kev_count":11,"last_cve_update":106},12780,"wepresent_wipg-1000p",{"id":111,"product_name":112,"version_count":51,"cve_count":11,"kev_count":20,"last_cve_update":25},12762,"clickshare_cs-100_huddle_firmware",{"id":114,"product_name":115,"version_count":20,"cve_count":11,"kev_count":20,"last_cve_update":25},12761,"clickshare_cs-100_huddle","Barco is a technology vendor with 27 tracked products and 40 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[118,125,133,139,143,147,152,156,160,165],{"cveId":119,"description":120,"publishedDate":106,"cvssScore":121,"cvssVersion":122,"severity":123,"isKev":4,"epssScore":124},"CVE-2019-3929","The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200\u002F250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.",9.8,"v3.1","Critical",0.98952,{"cveId":126,"description":127,"publishedDate":128,"cvssScore":129,"cvssVersion":122,"severity":130,"isKev":131,"epssScore":132},"CVE-2022-26233","Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and components. Requests must begin with the \"GET \u002F..\\..\" substring.","2022-04-03",7.5,"High",false,0.15028,{"cveId":134,"description":135,"publishedDate":136,"cvssScore":121,"cvssVersion":137,"severity":123,"isKev":131,"epssScore":138},"CVE-2016-3149","Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execute arbitrary code via unspecified vectors.","2017-01-12","v3.0",0.07735,{"cveId":140,"description":141,"publishedDate":106,"cvssScore":121,"cvssVersion":122,"severity":123,"isKev":131,"epssScore":142},"CVE-2019-3930","The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200\u002F250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to a stack buffer overflow in libAwgCgi.so's PARSERtoCHAR function. A remote, unauthenticated attacker can use this vulnerability to execute arbitrary code as root via a crafted request to the return.cgi endpoint.",0.06957,{"cveId":144,"description":145,"publishedDate":33,"cvssScore":121,"cvssVersion":122,"severity":123,"isKev":131,"epssScore":146},"CVE-2020-28334","Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2). Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19. The Barco wePresent WiPG-1600W device has a hardcoded root password hash included in the firmware image. Exploiting CVE-2020-28329, CVE-2020-28330 and CVE-2020-28331 could potentially be used in a simple and automated exploit chain to go from unauthenticated remote attacker to root shell.",0.04765,{"cveId":148,"description":149,"publishedDate":47,"cvssScore":150,"cvssVersion":137,"severity":130,"isKev":131,"epssScore":151},"CVE-2017-9377","A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device.",8.8,0.04345,{"cveId":153,"description":154,"publishedDate":43,"cvssScore":121,"cvssVersion":122,"severity":123,"isKev":131,"epssScore":155},"CVE-2019-18830","Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection. The embedded 'dongle_bridge' program used to expose the functionalities of the ClickShare Button to a USB host, is vulnerable to OS command injection vulnerabilities. These vulnerabilities could lead to code execution on the ClickShare Button with the privileges of the user 'nobody'.",0.04337,{"cveId":157,"description":158,"publishedDate":136,"cvssScore":129,"cvssVersion":137,"severity":130,"isKev":131,"epssScore":159},"CVE-2016-3151","Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to read \u002Fetc\u002Fshadow via unspecified vectors.",0.04276,{"cveId":161,"description":162,"publishedDate":163,"cvssScore":121,"cvssVersion":122,"severity":123,"isKev":131,"epssScore":164},"CVE-2020-17500","Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows Command Injection (issue 1 of 4). The NDN-210 has a web administration panel which is made available over https. The logon method is basic authentication. There is a command injection issue that will result in unauthenticated remote code execution in the username and password fields of the logon prompt. The NDN-210 is part of Barco TransForm N solution and includes the patch from TransForm N version 3.8 onwards.","2021-01-07",0.04108,{"cveId":166,"description":167,"publishedDate":33,"cvssScore":121,"cvssVersion":122,"severity":123,"isKev":131,"epssScore":168},"CVE-2020-28333","Barco wePresent WiPG-1600W devices allow Authentication Bypass. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-1600W web interface does not use session cookies for tracking authenticated sessions. Instead, the web interface uses a \"SEID\" token that is appended to the end of URLs in GET requests. Thus the \"SEID\" would be exposed in web proxy logs and browser history. An attacker that is able to capture the \"SEID\" and originate requests from the same IP address (via a NAT device or web proxy) would be able to access the user interface of the device without having to know the credentials.",0.03239,[170],{"cveId":119,"description":120,"publishedDate":106,"cvssScore":121,"cvssVersion":122,"severity":123,"isKev":4,"epssScore":124,"cisaVulnName":171,"cisaDateAdded":172,"cisaShortDescription":173,"cisaRequiredAction":174},"Crestron Multiple Products Command Injection Vulnerability","2022-04-15","Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.","Apply updates per vendor instructions.",[176,177,178,179,180,181,182,183,184,185],{"id":17,"product_name":18,"version_count":11,"cve_count":19,"kev_count":20,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":19,"kev_count":20,"last_cve_update":25},{"id":27,"product_name":28,"version_count":20,"cve_count":19,"kev_count":20,"last_cve_update":25},{"id":30,"product_name":31,"version_count":20,"cve_count":32,"kev_count":11,"last_cve_update":33},{"id":35,"product_name":36,"version_count":37,"cve_count":32,"kev_count":11,"last_cve_update":33},{"id":39,"product_name":40,"version_count":41,"cve_count":42,"kev_count":20,"last_cve_update":43},{"id":45,"product_name":46,"version_count":20,"cve_count":42,"kev_count":20,"last_cve_update":47},{"id":49,"product_name":50,"version_count":51,"cve_count":42,"kev_count":20,"last_cve_update":47},{"id":53,"product_name":54,"version_count":20,"cve_count":42,"kev_count":20,"last_cve_update":43},{"id":56,"product_name":57,"version_count":58,"cve_count":59,"kev_count":20,"last_cve_update":43},{"title":187,"metaDescription":188,"keywords":189,"structuredData":190},"Barco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Barco covering 27 products with 40 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Barco vulnerabilities, Barco security, Barco CVE, Barco threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Barco KEV, Barco exploited vulnerabilities",{"@context":191,"@type":192,"name":193,"description":188,"url":194},"https:\u002F\u002Fschema.org","Organization","Barco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fbarco",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":196,"apiVersion":197},"2026-10-19T00:22:51.535Z","3.0"]