Clickshare Cx 20 Gen2
Monthly
Denial of service in Barco ClickShare CX-20 Gen2 (firmware up to 02.26.00.0007) allows an authenticated, low-privilege attacker with network access to the device's management interface to disrupt or crash the unit by submitting a malformed 'wallpaper' argument to the /wallpaper upload endpoint. Publicly available exploit code exists, though no confirmed active exploitation (CISA KEV) has been reported. The impact is availability-only, with no data exposure or code execution, and the vendor was contacted but did not respond.
Denial of service in Barco ClickShare CX-20 Gen2 (firmware up to 02.26.00.0007) allows an authenticated, low-privilege attacker with network access to the device's management interface to disrupt or crash the unit by submitting a malformed 'wallpaper' argument to the /wallpaper upload endpoint. Publicly available exploit code exists, though no confirmed active exploitation (CISA KEV) has been reported. The impact is availability-only, with no data exposure or code execution, and the vendor was contacted but did not respond.