Insecure Firmware Update in Barco wePresent WiPG-1600W Devices
CVE-2020-28332

9.8CRITICAL

Key Information:

Vendor

Barco

Status
Wepresent Wipg-1600w Firmware
Vendor
CVE Published:
24 November 2020

What is CVE-2020-28332?

The Barco wePresent WiPG-1600W devices have a critical oversight in their firmware update process, which allows them to download and install firmware without conducting an integrity check. This vulnerability exposes the devices to the risk of installing modified or malicious firmware images. Specifically, versions 2.5.1.8, 2.5.0.25, 2.5.0.24, and 2.4.1.19 are affected, making it imperative for users to be aware of this flaw and take necessary precautions.

References

http://packetstormsecurity.com/files/160164/Barco-wePrese...
x_refsource_MISC
https://korelogic.com/Resources/Advisories/KL-001-2020-00...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.