Summary:
A vulnerability was identified in the Barco Control Room Management Suite web application that allows users to update/edit license information without authentication. Due to this vulnerability, a remote unauthenticated attacker can update/edit license key info with any arbitrary info on the remote server.
Issue severity:
Medium
Source:
The issue was notified to Barco through Barco’s responsible disclosure program by security researcher Murat Aydemir.
Affected products:
Barco Control Room Management Suite web application all versions before 3.14.1 release.
Fixed software:
The fix is available as part of Barco’s TransForm N 3.14.1 release. It is highly recommended to apply the fixes as part of this package. Further details of the release package are available in the release notes here.
TransForm N (TFN) stands for Barco’s visualization platform, consisting of display wall controller output nodes, input nodes, system and gateway nodes and the Control room Management software Suite (CMS). TransForm N helps control room professionals to collect all possible types of source data as well as organize and transform this source data in the most efficient and transparent way to create visual information on display walls.
