Vulnerability record · CVE-2017-9377 · published 30 October 2017
CVE-2017-9377: Barco clickshare csm-1 firmware os command injection vulnerability
BBarco · Clickshare Csm 1 Firmware
A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device.
Description
A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://www.securityfocus.com/bid/101617 | Third Party AdvisoryVDB Entry |
| https://www.barco.com/en/Support/software/R33050037 | PatchRelease Notes |
| https://www.barco.com/en/support/software/R33050020 | PatchRelease Notes |
| https://www.contextis.com/resources/advisories/cve-2017-9377 | Third Party Advisory |
| http://www.securityfocus.com/bid/101617 | Third Party AdvisoryVDB Entry |
| https://www.barco.com/en/Support/software/R33050037 | PatchRelease Notes |
| https://www.barco.com/en/support/software/R33050020 | PatchRelease Notes |
| https://www.contextis.com/resources/advisories/cve-2017-9377 | Third Party Advisory |
Track CVE-2017-9377 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2017-9377), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.
