CVE:CVE-2019-18830
CNNVD:CNNVD-201912-720
Barco ClickShare Button R9861500D01是比利时巴可（Barco）公司的一款用于演示系统的无线控制设备。
Barco ClickShare Button R9861500D01 1.9.0之前版本中嵌入的dongle_bridge程序存在操作系统命令注入漏洞。攻击者可借助特制命令利用该漏洞以‘nobody’用户的权限在系统上执行任意代码。
solution:Upgrade barco clickshare_cs-100_firmware to a higher version than 1.9.0,and avoid the version (,1.9.0); Upgrade barco clickshare_cse-200_firmware to a higher version than 1.9.0,and avoid the version (,1.9.0); Upgrade barco clickshare_cse-200+_firmware to a higher version than 1.9.0,and avoid the version (,1.9.0); Upgrade barco clickshare_cse-800_firmware to a higher version than 1.9.0,and avoid the version (,1.9.0)