CVE-2024-53919
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Barco ClickShare CX-30/20等都是比利时巴可（Barco）公司的产品。Barco ClickShare CX-30/20是一款适用于中小型会议室的无缝无线会议解决方案。Barco ClickShare C-5/10是一款适用于中小型会议室的无缝无线会议解决方案。Barco ClickShare Bar Pro/Core是一款高级一体式视频一体机。 Barco多款产品存在安全漏洞。攻击者利用该漏洞可以以 root 身份触发操作系统级命令执行。以下产品受到影响：Barco ClickSh
Possible ATT&CK Techniques 2 AI
T1546.001 · Change Default File Association T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-53919
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An injection vulnerability in Barco ClickShare CX-30/20, C-5/10, and ClickShare Bar Pro and Core models, running firmware before 2.21.1, allows physically proximate attackers or local admins to the webUI to trigger OS-level command execution as root.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Barco多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Barco ClickShare CX-30/20等都是比利时巴可（Barco）公司的产品。Barco ClickShare CX-30/20是一款适用于中小型会议室的无缝无线会议解决方案。Barco ClickShare C-5/10是一款适用于中小型会议室的无缝无线会议解决方案。Barco ClickShare Bar Pro/Core是一款高级一体式视频一体机。 Barco多款产品存在安全漏洞。攻击者利用该漏洞可以以 root 身份触发操作系统级命令执行。以下产品受到影响：Barco ClickSh
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2024-53919
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-53919
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-53919 (2)
Same Patch Batch · n/a · 2024-12-10 · 24 CVEs total
| CVE-2024-21542 | 8.6 HIGH | Luigi 安全漏洞 |
| CVE-2024-50928 | Silicon Labs Z-Wave 700和800 安全漏洞 | |
| CVE-2024-53480 | Phpgurukul Beauty Parlour Management System 安全漏洞 | |
| CVE-2024-53481 | PHPGurukul Beauty Parlour Management System 安全漏洞 | |
| CVE-2024-53552 | CrushFTP 安全漏洞 | |
| CVE-2024-45493 | MSA Safety FieldServer 安全漏洞 | |
| CVE-2024-45494 | MSA Safety FieldServer 安全漏洞 | |
| CVE-2024-46340 | TP-LINK WR845N 安全漏洞 | |
| CVE-2024-46657 | Artifex Software MuPDF 安全漏洞 | |
| CVE-2024-46442 | BYD Dilink Headunit System 安全漏洞 | |
| CVE-2024-46341 | TP-LINK WR845N 安全漏洞 | |
| CVE-2024-54751 | COMFAST CF-WR630AX 安全漏洞 | |
| CVE-2024-51165 | JEPaaS 安全漏洞 | |
| CVE-2024-50920 | Silicon Labs Z-Wave 700和Silicon Labs Z-Wave 800 安全漏洞 | |
| CVE-2024-50921 | Silicon Labs Z-Wave 700和800 安全漏洞 | |
| CVE-2024-50930 | Silicon Labs Z-Wave 500 安全漏洞 | |
| CVE-2024-50929 | Silicon Labs Z-Wave 700和800 安全漏洞 | |
| CVE-2024-50931 | Silicon Labs Z-Wave 500 安全漏洞 | |
| CVE-2024-50924 | Silicon Labs Z-Wave 700和Silicon Labs Z-Wave 800 安全漏洞 | |
| CVE-2024-50699 | TP-LINK WR845N 安全漏洞 |
Showing top 20 of 24 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2024-53919
No comments yet