On Barco ClickShare Button R9861500D01 devices (before firmware version 1.9.0) JTAG access is disabled after ROM code execution. This means that JTAG access is possible when the system is running code from ROM before handing control over to embedded firmware.

Threat-Mapped Scoring

Score: 1.8

Priority: P4 - Informational (Low)

• S9 – Sabotage of System/App

EPSS

Score: 0.00626
Percentile: 0.69264

CVSS Scoring

Mapped CWE(s)

• CWE-285 : Improper Authorization
• CWE-362 : Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

All CAPEC(s)

CAPEC(s) with Mapped TTPs

Mapped ATT&CK TTPs

• T1574.010 : Services File Permissions Weakness
  Kill Chain: persistence
• T1083 : File and Directory Discovery
  Kill Chain: discovery
• T1562.003 : Impair Command History Logging
  Kill Chain: defense-evasion
• T1574.006 : Dynamic Linker Hijacking
  Kill Chain: persistence
• T1574.007 : Path Interception by PATH Environment Variable
  Kill Chain: persistence
• T1574.005 : Executable Installer File Permissions Weakness
  Kill Chain: persistence
• T1574.010 : Services File Permissions Weakness
  Kill Chain: persistence
• T1134.001 : Token Impersonation/Theft
  Kill Chain: defense-evasion
• T1550.004 : Web Session Cookie
  Kill Chain: defense-evasion
• T1005 : Data from Local System
  Kill Chain: collection
• T1012 : Query Registry
  Kill Chain: discovery
• T1552.002 : Credentials in Registry
  Kill Chain: credential-access
• T1565.002 : Transmitted Data Manipulation
  Kill Chain: impact

Malware

APTs Threat Group Associations

Campaigns

Affected Products

• cpe:2.3:o:barco:clickshare_cs-100_firmware:*:*:*:*:*:*:*:*
• cpe:2.3:o:barco:clickshare_cse-200_firmware:*:*:*:*:*:*:*:*
• cpe:2.3:o:barco:clickshare_cse-200\+_firmware:*:*:*:*:*:*:*:*
• cpe:2.3:o:barco:clickshare_cse-800_firmware:*:*:*:*:*:*:*:*

← Back to Home