barco wepresent wipg-1600w firmware 2.5.1.8 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

Barco wePresent WiPG-1600W devices have Improper Access Control. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-1600W device has an SSH daemon included in the firmware image. By default, the SSH daemon is disabled and does not start at system boot. The system initializati...

Barco Wepresent Wipg-1600w Firmware 2.5.1.8

9.8

CVSSv3

Barco wePresent WiPG-1600W devices download code without an Integrity Check. Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19. The Barco wePresent WiPG-1600W firmware does not perform verification of digitally signed firmware updates and is susceptible to processing and...

Barco Wepresent Wipg-1600w Firmware 2.5.1.8

6.5

CVSSv3

Barco wePresent WiPG-1600W devices have Unprotected Transport of Credentials. Affected Version(s): 2.5.1.8. An attacker armed with hardcoded API credentials (retrieved by exploiting CVE-2020-28329) can issue an authenticated query to display the admin password for the main web us...

Barco Wepresent Wipg-1600w Firmware 2.5.1.8

9.8

CVSSv3

Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image. A malicious actor could use this password to access authenticated, administrative functions in the API. Affected Version(s): 2.5.1.8, 2.5.0.25,...

Barco Wepresent Wipg-1600w Firmware 2.4.1.19 Barco Wepresent Wipg-1600w Firmware 2.5.0.24 Barco Wepresent Wipg-1600w Firmware 2.5.0.25 Barco Wepresent Wipg-1600w Firmware 2.5.1.8

9.8

CVSSv3

Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2). Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19. The Barco wePresent WiPG-1600W device has a hardcoded root password hash included in the firmware image. Exploiting CVE-2020-28329, CVE-2020-2...

Barco Wepresent Wipg-1600w Firmware 2.4.1.19 Barco Wepresent Wipg-1600w Firmware 2.5.0.24 Barco Wepresent Wipg-1600w Firmware 2.5.0.25 Barco Wepresent Wipg-1600w Firmware 2.5.1.8

NA

Barco wePresent WiPG-1600W versions 2.5.1.8, 2.5.0.25, 2.5.0.24, and 2.4.1.19 have firmware that does not perform verification of digitally signed firmware updates and is susceptible to processing and installing modified/malicious images.

NA

Barco wePresent WiPG-1600W versions 2.5.1.8, 2.5.0.25, 2.5.0.24, and 2.4.1.19 have a hardcoded root password hash included in the firmware image.

NA

Barco wePresent WiPG-1600W version 2.5.1.8 has an SSH daemon included in the firmware image. By default, the SSH daemon is disabled and does not start at system boot. The system initialization scripts read a device configuration file variable to see if the SSH daemon should be st...

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook