Is CVE-2016-3152 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2016-3152 being exploited in the wild.

How severe is CVE-2016-3152?

Critical severity, with a CVSS score of 9.8, published 12 January 2017.

Which products and versions are affected?

Barco ClickShare CSC-1 firmware before 01.09.03.

Is there a fix for CVE-2016-3152?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2016-3152 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2016-3152?

Check whether you run Barco Clickshare Csc-1 or Barco Clickshare Csc-1 Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2016-3152: Barco ClickShare CSC-1 root password disclosure in firmware image

CVE-2016-3152 · Severity: critical · CVSS 9.8 · Published 2017-01-12

Barco ClickShare CSC-1 wireless presentation systems contain a security flaw that allows the administrative root password to be recovered from the device's firmware. An attacker can download and analyze the firmware image to obtain these credentials, potentially leading to full unauthorized control over the presentation system. This could allow an adversary to intercept shared content or disrupt corporate meetings and operations.

Technologies: Barco Clickshare Csc-1, Barco Clickshare Csc-1 Firmware. Vendors: Barco.

Quick answers

Is CVE-2016-3152 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2016-3152 being exploited in the wild.
How severe is CVE-2016-3152?: Critical severity, with a CVSS score of 9.8, published 12 January 2017.
Which products and versions are affected?: Barco ClickShare CSC-1 firmware before 01.09.03.
Is there a fix for CVE-2016-3152?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2016-3152 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2016-3152?: Check whether you run Barco Clickshare Csc-1 or Barco Clickshare Csc-1 Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The Barco ClickShare CSC-1 presentation system suffers from an information disclosure vulnerability (CWE-200) due to the inclusion of sensitive credentials within its firmware images. Remote attackers can download the firmware and use extraction tools to recover the root password. This vulnerability is categorized as critical because it provides a path to full administrative access without requiring prior authentication. The issue is resolved in firmware version 01.09.03 and later.

Affected products

Barco ClickShare CSC-1 firmware before 01.09.03

Timeline

2017-01-12: disclosed: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.