Authentication Bypass Vulnerability in Barco wePresent WiPG-1600W Devices

CVE-2020-28333

What is CVE-2020-28333?

Barco wePresent WiPG-1600W devices present a security risk due to a vulnerability that allows attackers to bypass authentication. This issue arises from the use of a 'SEID' token, which is included in URLs instead of utilizing secure session cookies. As a result, the 'SEID' may be exposed in web proxy logs and browser histories. An attacker monitoring these logs can capture the token and send requests from the same IP address, gaining unauthorized access to the device's user interface without requiring user credentials.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References