barco wepresent wipg-1600w firmware vulnerabilities and exploits

(subscribe to this query)

Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2). Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19. The Barco wePresent WiPG-1600W device has a hardcoded root password hash included in the firmware image. Exploiting CVE-2020-28329, CVE-2020-2...

Barco Wepresent Wipg-1600w Firmware 2.4.1.19 Barco Wepresent Wipg-1600w Firmware 2.5.0.24 Barco Wepresent Wipg-1600w Firmware 2.5.0.25 Barco Wepresent Wipg-1600w Firmware 2.5.1.8

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2...

Crestron Am-100 Firmware 1.6.0.2 Crestron Am-101 Firmware 2.7.0.2 Barco Wepresent Wipg-1000p Firmware 2.3.0.10 Barco Wepresent Wipg-1600w Firmware Extron Sharelink 200 Firmware 2.0.3.4 Extron Sharelink 250 Firmware 2.0.3.4 Teqavit Wips710 Firmware 1.1.0.7 Sharp Pn-l703wa Firmware 1.4.2.3 Optoma Wps-pro Firmware 1.0.0.5 Blackbox Hd Wireless Presentation System Firmware 1.0.0.5 Infocus Liteshow3 Firmware 1.0.16 Infocus Liteshow4 Firmware 2.0.0.7

1 EDB exploit1 Github repository

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2...

Crestron Am-100 Firmware 1.6.0.2 Crestron Am-101 Firmware 2.7.0.2 Barco Wepresent Wipg-1000p Firmware 2.3.0.10 Barco Wepresent Wipg-1600w Firmware Extron Sharelink 200 Firmware 2.0.3.4 Extron Sharelink 250 Firmware 2.0.3.4 Teqavit Wips710 Firmware 1.1.0.7 Sharp Pn-l703wa Firmware 1.4.2.3 Optoma Wps-pro Firmware 1.0.0.5 Blackbox Hd Wireless Presentation System Firmware 1.0.0.5 Infocus Liteshow3 Firmware 1.0.16 Infocus Liteshow4 Firmware 2.0.0.7

Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image. A malicious actor could use this password to access authenticated, administrative functions in the API. Affected Version(s): 2.5.1.8, 2.5.0.25,...

Barco Wepresent Wipg-1600w Firmware 2.4.1.19 Barco Wepresent Wipg-1600w Firmware 2.5.0.24 Barco Wepresent Wipg-1600w Firmware 2.5.0.25 Barco Wepresent Wipg-1600w Firmware 2.5.1.8

Barco wePresent WiPG-1600W devices download code without an Integrity Check. Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19. The Barco wePresent WiPG-1600W firmware does not perform verification of digitally signed firmware updates and is susceptible to processing and...

Barco Wepresent Wipg-1600w Firmware 2.5.1.8

Barco wePresent WiPG-1600W devices have Improper Access Control. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-1600W device has an SSH daemon included in the firmware image. By default, the SSH daemon is disabled and does not start at system boot. The system initializati...

Barco Wepresent Wipg-1600w Firmware 2.5.1.8

Barco wePresent WiPG-1600W devices have Unprotected Transport of Credentials. Affected Version(s): 2.5.1.8. An attacker armed with hardcoded API credentials (retrieved by exploiting CVE-2020-28329) can issue an authenticated query to display the admin password for the main web us...

Barco Wepresent Wipg-1600w Firmware 2.5.1.8

Barco wePresent WiPG-1600W version 2.5.1.8 has an SSH daemon included in the firmware image. By default, the SSH daemon is disabled and does not start at system boot. The system initialization scripts read a device configuration file variable to see if the SSH daemon should be st...

Barco wePresent WiPG-1600W versions 2.5.1.8, 2.5.0.25, 2.5.0.24, and 2.4.1.19 have firmware that does not perform verification of digitally signed firmware updates and is susceptible to processing and installing modified/malicious images.

Barco wePresent WiPG-1600W versions 2.5.1.8, 2.5.0.25, 2.5.0.24, and 2.4.1.19 have a hardcoded root password hash included in the firmware image.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook