CVE-2019-18827: Race Condition
First published: Mon Dec 16 2019(Updated: )
On Barco ClickShare Button R9861500D01 devices (before firmware version 1.9.0) JTAG access is disabled after ROM code execution. This means that JTAG access is possible when the system is running code from ROM before handing control over to embedded firmware.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Barco Clickshare Cs-100 Firmware | <1.9.0 | |
| Barco Clickshare Cs-100 | ||
| Barco Clickshare Cse-200 Firmware | <1.9.0 | |
| Barco ClickShare CSE-200 | ||
| Barco Clickshare Cse-200\+ Firmware | <1.9.0 | |
| Barco Clickshare Cse-200\+ | ||
| Barco Clickshare Cse-800 Firmware | <1.9.0 | |
| Barco Clickshare Cse-800 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/
- https://www.barco.com/en/clickshare/firmware-update
- https://www.barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
- https://www.barco.com/en/support/software/R33050070?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
- https://www.barco.com/en/support/software/R33050095?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
- https://www.barco.com/en/support/software/R33050125?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
Frequently Asked Questions
What is CVE-2019-18827?
CVE-2019-18827 is a vulnerability that affects Barco ClickShare Button R9861500D01 devices before firmware version 1.9.0.
What is the severity of CVE-2019-18827?
CVE-2019-18827 has a severity level of 5.9 (medium).
How does CVE-2019-18827 affect Barco ClickShare devices?
CVE-2019-18827 disables JTAG access after ROM code execution on Barco ClickShare Button R9861500D01 devices.
Which Barco ClickShare devices are affected by CVE-2019-18827?
Barco ClickShare Button R9861500D01 devices before firmware version 1.9.0 are affected by CVE-2019-18827.
How can I fix CVE-2019-18827?
To fix CVE-2019-18827, update the firmware of your Barco ClickShare Button R9861500D01 device to version 1.9.0 or above.
- collector/nvd-index
- agent/description
- agent/event
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/barco
- canonical/barco clickshare cs-100 firmware
- canonical/barco clickshare cs-100
- canonical/barco clickshare cse-200 firmware
- canonical/barco clickshare cse-200
- canonical/barco clickshare cse-200\+ firmware
- canonical/barco clickshare cse-200\+
- canonical/barco clickshare cse-800 firmware
- canonical/barco clickshare cse-800