| 标题 | Barco ClickShare CX-20 Gen2 02.26.00.0007 Denial of Service |
|---|
| 描述 | A vulnerability in the wallpaper upload functionality of Barco
ClickShare CX-20 Gen2 (Platform: C3010S, Model: R9861612EU,
Firmware: 02.26.00.0007) allows an authenticated attacker with
default credentials to cause a persistent denial of service
condition via a crafted polyglot JPEG file with trailing data
uploaded to the /wallpaper endpoint. The device fails to properly
validate file content beyond magic bytes (FFD8FFE0), causing an
unhandled server exception (HTTP 500) that corrupts persistent
storage.
The vulnerability was confirmed across two separate units on the
same firmware version with varying impact severity:
Device 1: The /wallpaper endpoint returns a persistent HTTP 500
error. All other web UI endpoints remain accessible. The broken
state survives device reboots and requires a full factory settings
reset to recover.
Device 2: The entire HTTPS service (port 443) became completely
unreachable following the upload. No endpoints were accessible
from any client or browser. Burp Suite confirmed connection
refused on port 443. The exact causal relationship between the
upload and the full service outage has not been conclusively
confirmed, however no other changes were made during the session
and no firewall or network-level block was identified.
Confirmed on the latest available firmware as of August 2026. |
|---|
| 来源 | ⚠️ https://github.com/0xWKZER/-security-disclosures/blob/main/Barco001.md |
|---|
| 用户 | WKZER (UID 100459) |
|---|
| 提交 | 2026-08-08 19時50分 (2 月前) |
|---|
| 管理 | 2026-09-27 10時54分 (2 months later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 410852 [Barco ClickShare CX-20 Gen2 直到 02.26.00.0007 Wallpaper Upload /wallpaper 拒绝服务] |
|---|
| 积分 | 20 |
|---|