CVEvulnerability

CVE-2019-18827

5.9 MEDIUM Published 2019-12-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-12-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-285, CWE-362

Description

On Barco ClickShare Button R9861500D01 devices (before firmware version 1.9.0) JTAG access is disabled after ROM code execution. This means that JTAG access is possible when the system is running code from ROM before handing control over to embedded firmware.

Affected configurations

• barco clickshare cs-100 firmware (< 1.9.0) • barco clickshare cse-200 firmware (< 1.9.0) • barco clickshare cse-200\+ firmware (< 1.9.0) • barco clickshare cse-800 firmware (< 1.9.0)

Related

Weakness · CWE (2)

  • CWE-285 Improper Authorization weakness
  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

Referenced by CWE · observed example (3)

  • CWE-1191 On-Chip Debug and Test Interface With Improper Access Control weakness
  • CWE-1244 Internal Asset Exposed to Unsafe Debug Access Level or State weakness
  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References