CRITICAL🇵🇱 Wersja polska

CVE-2019-3930

CVSS 9.8v3.1pub. 2019-04-30upd. 2024-11-21

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to a stack buffer overflow in libAwgCgi.so's PARSERtoCHAR function. A remote, unauthenticated attacker can use this vulnerability to execute arbitrary code as root via a crafted request to the return.cgi endpoint.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Barco Wepresent Wipg 1000p

    HW
    Barco
    all versions

  • Barco Wepresent Wipg 1000p Firmware

    OS
    Barco
    2.3.0.10

  • Barco Wepresent Wipg 1600w

    HW
    Barco
    all versions

  • Barco Wepresent Wipg 1600w Firmware

    OS
    Barco
    < 2.4.1.19

  • Blackbox Hd Wireless Presentation System

    HW
    Blackbox
    all versions

  • Blackbox Hd Wireless Presentation System Firmware

    OS
    Blackbox
    1.0.0.5

  • Crestron Am 100

    HW
    Crestron
    all versions

  • Crestron Am 100 Firmware

    OS
    Crestron
    1.6.0.2

  • Crestron Am 101

    HW
    Crestron
    all versions

  • Crestron Am 101 Firmware

    OS
    Crestron
    2.7.0.2

  • Extron Sharelink 200

    HW
    Extron
    all versions

  • Extron Sharelink 200 Firmware

    OS
    Extron
    2.0.3.4

  • Extron Sharelink 250

    HW
    Extron
    all versions

  • Extron Sharelink 250 Firmware

    OS
    Extron
    2.0.3.4

  • Infocus Liteshow3

    HW
    Infocus
    all versions

  • Infocus Liteshow3 Firmware

    OS
    Infocus
    1.0.16

  • Infocus Liteshow4

    HW
    Infocus
    all versions

  • Infocus Liteshow4 Firmware

    OS
    Infocus
    2.0.0.7

  • Optoma Wps Pro

    HW
    Optoma
    all versions

  • Optoma Wps Pro Firmware

    OS
    Optoma
    1.0.0.5

  • Sharp Pn L703wa

    HW
    Sharp
    all versions

  • Sharp Pn L703wa Firmware

    OS
    Sharp
    1.4.2.3

  • Teqavit Wips710

    HW
    Teqavit
    all versions

  • Teqavit Wips710 Firmware

    OS
    Teqavit
    1.1.0.7
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEAuth BypassMemory
CWE
References

Related vulnerabilities

CVE-2019-3929CRITICAL9.8⚠ KEVPL ✓same product

Command injection w endpoint file_transfer.cgi — RCE jako root bez uwierzytelnienia

CVE-2020-28333CRITICAL9.8PL ✓same product

Barco wePresent WiPG-1600W — Authentication Bypass przez token SEID w URL

CVE-2020-28329CRITICAL9.8PL ✓same product

Barco wePresent WiPG-1600W — zakodowane na stałe dane uwierzytelniające API

CVE-2020-28332CRITICAL9.8PL ✓same product

Barco wePresent WiPG-1600W — brak weryfikacji integralności aktualizacji firmware

CVE-2020-28334CRITICAL9.8PL ✓same product

Barco wePresent WiPG-1600W — zakodowane na stałe hasło root w firmware