Barco Mirrorop Windows Sender vulnerabilities

2 CVEs affecting Barco Mirrorop Windows Sender, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-38142, published 2021-09-07.

More from Barco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-38142, published 2021-09-07. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades. An attacker on the local network can achieve remote code execution on any computer that…
• CVE-2021-35482, published 2021-07-21. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in Barco MirrorOp Windows Sender before 2.5.4.70. An attacker in the local network is able to achieve Remote Code Execution (with user privileges of the local user) on any…