ViewSonic ViewBoard vulnerabilities

There is an input injection vulnerability in vCast exposed network services in ViewSonic ViewBoard. A remote, unauthenticated attacker can inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints.

A screen capture endpoint in the vCast media streaming service in ViewSonic ViewBoard allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content. GET requests to unauthenticated /snapshot or /screen endpoints return JPEGs.

There is an arbitrary file download vulnerability in the vCast APK delivery mechanism in ViewSonic ViewBoard. A remote, unauthenticated attacker can trigger unprivileged APK installation by serving a malicious APK URL through an unauthenticated download endpoint.