What’s Vulnerable › Vulnerabilities
CVE-2019-18830
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 4.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-12-16 · updated 2026-06-17
- Weakness: CWE-78
Description
Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection. The embedded 'dongle_bridge' program used to expose the functionalities of the ClickShare Button to a USB host, is vulnerable to OS command injection vulnerabilities. These vulnerabilities could lead to code execution on the ClickShare Button with the privileges of the user 'nobody'.
Affected products
- Barco Clickshare Cs-100 Firmware: before 1.9.0 — fixed in 1.9.0
- Barco Clickshare Cse-200+ Firmware: before 1.9.0 — fixed in 1.9.0
- Barco Clickshare Cse-200 Firmware: before 1.9.0 — fixed in 1.9.0
- Barco Clickshare Cse-800 Firmware: before 1.9.0 — fixed in 1.9.0
How to fix
Upgrade to a fixed version: Barco Clickshare Cs-100 Firmware 1.9.0; Barco Clickshare Cse-200+ Firmware 1.9.0; Barco Clickshare Cse-200 Firmware 1.9.0; Barco Clickshare Cse-800 Firmware 1.9.0. Check the vendor advisory for mitigations.
References
- https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/
- https://www.barco.com/en/clickshare/firmware-update
- https://www.barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
- https://www.barco.com/en/support/software/R33050070?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
- https://www.barco.com/en/support/software/R33050095?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
- https://www.barco.com/en/support/software/R33050125?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
- https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/
- https://www.barco.com/en/clickshare/firmware-update
- https://www.barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
- https://www.barco.com/en/support/software/R33050070?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
- https://www.barco.com/en/support/software/R33050095?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
- https://www.barco.com/en/support/software/R33050125?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
Get alerted when CVE-2019-18830 or the next vulnerability affects your stack