CVE-2016-3151

HIGH

Barco ClickShare CSC-1, CSM-1, and CSE-200 Firmware - Path Traversal via Wallpaper Parsing

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to read /etc/shadow via unspecified vectors.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/539754/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/94330

Scores

CVSS v3 7.5
EPSS 0.0428
EPSS Percentile 89.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-22
Status published
Products (3)
barco/clickshare_csc-1_firmware < 01.09.02.03
barco/clickshare_cse-200_firmware < 01.03.01.05
barco/clickshare_csm-1_firmware < 01.06.01.04
Published Jan 12, 2017
Tracked Since Feb 18, 2026