BA
Vendor
Barco
61
CVEs
2
On KEV
0
New 30D
Products
WW9.8
Wepresent Wipg-1600w Firmware
Barco
8 CVEs1 on KEV0 new
WW9.8
Wepresent Wipg-1000p Firmware
Barco
2 CVEs1 on KEV0 new
CC9.8
Clickshare Cse-200 Firmware
Barco
9 CVEs0 on KEV0 new
CR7.5
Control Room Management Suite
Barco
9 CVEs0 on KEV0 new
CC9.8
Clickshare Cs-100 Firmware
Barco
6 CVEs0 on KEV0 new
CC9.8
Clickshare Csc-1 Firmware
Barco
6 CVEs0 on KEV0 new
CC9.8
Clickshare Cse-800 Firmware
Barco
5 CVEs0 on KEV0 new
CB8.1
Clickshare Button R9861500d01 Firmware
Barco
4 CVEs0 on KEV0 new
CC9.8
Clickshare Csm-1 Firmware
Barco
4 CVEs0 on KEV0 new
TN9.8
Transform N
Barco
4 CVEs0 on KEV0 new
MW8.8
Mirrorop Windows Sender
Barco
2 CVEs0 on KEV0 new
CC7.5
Clickshare Cs-100 Huddle Firmware
Barco
1 CVEs0 on KEV0 new
CC6.5
ClickShare CX-20 Gen2
Barco
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-100902 | CC ClickShare CX-20 Gen2 Barco | 6.5 | Sep 28 | Barco ClickShare CX-20 Gen2 Wallpaper Upload wallpaper improper validation of syntactic correctness of input |
| CVE-2022-26978 | CR Control Room Management Suite Barco | 6.1 | Jun 2 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checklogin.jsp endpoint |
| CVE-2022-26977 | CR Control Room Management Suite Barco | 6.1 | Jun 2 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism |
| CVE-2022-26976 | CR Control Room Management Suite Barco | 5.4 | Jun 2 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism |
| CVE-2022-26975 | CR Control Room Management Suite Barco | 7.5 | Jun 2 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication |
| CVE-2022-26974 | CR Control Room Management Suite Barco | 6.1 | Jun 2 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a file upload mechanism |
| CVE-2022-26973 | CR Control Room Management Suite Barco | 5.3 | Jun 2 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism |
| CVE-2022-26972 | CR Control Room Management Suite Barco | 6.1 | Jun 2 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint |
| CVE-2022-26971 | CR Control Room Management Suite Barco | 5.3 | Jun 2 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism |
| CVE-2022-26233 | CR Control Room Management Suite Barco | 7.5 | Apr 3 | Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and… |
| CVE-2021-38142 | MW Mirrorop Windows Sender Barco | 8.8 | Sep 7 | Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades |
| CVE-2021-35482 | MW Mirrorop Windows Sender Barco | 7.8 | Jul 21 | An issue was discovered in Barco MirrorOp Windows Sender before 2.5.4.70 |
| CVE-2020-17504 | TN Transform N Barco | 7.2 | Jan 8 | The NDN-210 has a web administration panel which is made available over https |
| CVE-2020-17503 | TN Transform N Barco | 7.2 | Jan 8 | The NDN-210 has a web administration panel which is made available over https |
| CVE-2020-17502 | TN Transform N Barco | 7.2 | Jan 8 | Barco TransForm N before 3.8 allows Command Injection (issue 2 of 4) |
| CVE-2020-17500 | TN Transform N Barco | 9.8 | Jan 7 | Barco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows Command Injection (issue 1 of 4) |
| CVE-2020-28329 | WW Wepresent Wipg-1600w Firmware Barco | 9.8 | Nov 24 | Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image |
| CVE-2020-28334 | WW Wepresent Wipg-1600w Firmware Barco | 9.8 | Nov 24 | Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2) |
| CVE-2020-28333 | WW Wepresent Wipg-1600w Firmware Barco | 9.8 | Nov 24 | Barco wePresent WiPG-1600W devices allow Authentication Bypass |
| CVE-2020-28332 | WW Wepresent Wipg-1600w Firmware Barco | 9.8 | Nov 24 | Barco wePresent WiPG-1600W devices download code without an Integrity Check |
| CVE-2020-28330 | WW Wepresent Wipg-1600w Firmware Barco | 6.5 | Nov 24 | Barco wePresent WiPG-1600W devices have Unprotected Transport of Credentials |
| CVE-2020-28331 | WW Wepresent Wipg-1600w Firmware Barco | 7.5 | Nov 24 | Barco wePresent WiPG-1600W devices have Improper Access Control |
| CVE-2019-18833 | CB Clickshare Button R9861500d01 Firmware Barco | 5.9 | Dec 17 | Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information exposure (issue 2 of 2) |
| CVE-2019-18832 | CB Clickshare Button R9861500d01 Firmware Barco | 8.1 | Dec 17 | Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management |
| CVE-2019-18829 | CB Clickshare Button R9861500d01 Firmware Barco | 7.8 | Dec 17 | Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check |
| CVE-2019-18825 | CC Clickshare Cs-100 Huddle Firmware Barco | 7.5 | Dec 17 | Barco ClickShare Huddle CS-100 devices before 1.9.0 and CSE-200 devices before 1.9.0 have incorrect Credentials Management |
| CVE-2019-18824 | CB Clickshare Button R9861500d01 Firmware Barco | 6.6 | Dec 17 | Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check |
| CVE-2019-18831 | CC Clickshare Cs-100 Firmware Barco | 5.3 | Dec 16 | Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information Exposure |
| CVE-2019-18830 | CC Clickshare Cse-200+ Firmware Barco | 9.8 | Dec 16 | Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection |
| CVE-2019-18828 | CC Clickshare Cs-100 Firmware Barco | 6.8 | Dec 16 | Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials |
| CVE-2019-18827 | CC Clickshare Cs-100 Firmware Barco | 5.9 | Dec 16 | On Barco ClickShare Button R9861500D01 devices (before firmware version 1.9.0) JTAG access is disabled after ROM code execution |
| CVE-2019-18826 | CC Clickshare Cs-100 Firmware Barco | 9.8 | Dec 16 | Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate's Chain of Trust |
| CVE-2019-3930 | WW Wepresent Wipg-1600w Firmware Barco | 9.8 | Apr 30 | The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron… |
| CVE-2019-3929 In wildKEV | WW Wepresent Wipg-1600w Firmware Barco | 9.8 | Apr 30 | Crestron Multiple Products Command Injection Vulnerability |
| CVE-2018-10943 | CC Clickshare Cse-200 Firmware Barco | 7.5 | Jul 10 | An issue was discovered on Barco ClickShare CSE-200 and CS-100 Base Units with firmware before 1.6.0.3 |
| CVE-2017-9377 | CC Clickshare Csc-1 Firmware Barco | 8.8 | Oct 30 | A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10 |
| CVE-2017-12460 | CC Clickshare Csm-1 Firmware Barco | 5.4 | Oct 30 | An issue was discovered in Barco ClickShare CSM-1 firmware before v1.7.0.3 and CSC-1 firmware before v1.10.0.10 |
| CVE-2016-3152 | CC Clickshare Csc-1 Firmware Barco | 9.8 | Jan 12 | Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware image |
| CVE-2016-3151 | CC Clickshare Cse-200 Firmware Barco | 7.5 | Jan 12 | Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before… |
| CVE-2016-3150 | CC Clickshare Csc-1 Firmware Barco | 6.1 | Jan 12 | Cross-site scripting (XSS) vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before… |
| CVE-2016-3149 | CC Clickshare Csc-1 Firmware Barco | 9.8 | Jan 12 | Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execute arbitrary code via unspecified… |