High severity7.5NVD Advisory· Published Jan 12, 2017· Updated Jun 17, 2026
CVE-2016-3151
CVE-2016-3151
Description
Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to read /etc/shadow via unspecified vectors.
Affected products
6cpe:2.3:o:barco:clickshare_csc-1_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:barco:clickshare_csc-1_firmware:*:*:*:*:*:*:*:*range: <=01.09.02.03
- (no CPE)range: <01.09.03
cpe:2.3:o:barco:clickshare_cse-200_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:barco:clickshare_cse-200_firmware:*:*:*:*:*:*:*:*range: <=01.03.01.05
- (no CPE)range: <01.03.02
cpe:2.3:o:barco:clickshare_csm-1_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:barco:clickshare_csm-1_firmware:*:*:*:*:*:*:*:*range: <=01.06.01.04
- (no CPE)range: <01.06.02
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/139713/Barco-ClickShare-XSS-Remote-Code-Execution-Path-Traversal.htmlnvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/94330nvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/archive/1/539754/100/0/threadednvd
News mentions
0No linked articles in our index yet.