Hard-coded Credentials Vulnerability in Barco wePresent WiPG-1600W Devices
CVE-2020-28334

9.8CRITICAL

Key Information:

Vendor

Barco

Status
Wepresent Wipg-1600w Firmware
Vendor
CVE Published:
24 November 2020

What is CVE-2020-28334?

The Barco wePresent WiPG-1600W devices are impacted by a vulnerability due to the presence of hard-coded root password hashes in their firmware. This flaw allows attackers to potentially exploit it in conjunction with other vulnerabilities (CVE-2020-28329, CVE-2020-28330, and CVE-2020-28331) to gain unauthorized root access through a simple and automated process. Devices running versions 2.5.1.8, 2.5.0.25, 2.5.0.24, and 2.4.1.19 are affected, posing significant security risks for users who rely on these products for secure presentations and information sharing.

References

http://packetstormsecurity.com/files/160163/Barco-wePrese...
x_refsource_MISC
https://korelogic.com/Resources/Advisories/KL-001-2020-00...
x_refsource_MISC

EPSS Score

13% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.