CVE-2022-26233
HIGH NUCLEIBarco Control Room Management <2.9 Build 0275 - Path Traversal
Title source: llmExploitation Summary
CVE-2022-26233 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.
Description
Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and components. Requests must begin with the "GET /..\.." substring.
Nuclei Templates (1)
Barco Control Room Management Suite <=2.9 Build 0275 - Local File Inclusion
HIGHby 0x_Akoko
References (2)
Core 2
Core References
Exploit, Mailing List, Third Party Advisory x_refsource_misc
http://seclists.org/fulldisclosure/2022/Apr/0
Exploit, Third Party Advisory, VDB Entry x_refsource_misc
http://packetstormsecurity.com/files/166577/Barco-Control-Room-Management-Suite-Directory-Traversal.html
Scores
CVSS v3
7.5
EPSS
0.1476
EPSS Percentile
96.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-22
Status
published
Products (1)
barco/control_room_management_suite
< 2.9
Published
Apr 03, 2022
Tracked Since
Feb 18, 2026