CVE-2018-10943 Denial of service in n/a

What is CVE-2018-10943?

CVE-2018-10943 is a high-severity denial of service vulnerability in n/a, published on 10 Jul 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue was discovered on Barco ClickShare CSE-200 and CS-100 Base Units with firmware before 1.6.0.3. Sending an arbitrary unexpected string to TCP port 7100 respecting a certain frequency timing disconnects all clients and results in a crash of the Unit.

Weakness: CWE-20

Which versions are affected by CVE-2018-10943?

It affects 2 products.

Products include Barco Clickshare Cs-100 Firmware, Barco Clickshare Cse-200 Firmware.

How do I fix CVE-2018-10943?

No fix has been published for CVE-2018-10943 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2018-10943 being exploited?

There is no known exploitation of CVE-2018-10943 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2019-18826 Security feature bypass in n/a Critical 9.8
• CVE-2019-18830 Command injection in n/a Critical 9.8
• CVE-2019-18828 Hardcoded credentials in n/a Medium 6.8
• CVE-2019-18827 Security feature bypass in n/a Medium 5.9
• CVE-2019-18831 Hardcoded credentials in n/a Medium 5.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-g8mq-8x8h-9v5c.