CVE-2025-34103

🗓️ 15 Jul 2025 13:10:41Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 21 Views🌐 WEB

Unauthenticated command injection in WePresent WiPG-1000 firmware prior to 2.2.3.0 allows remote attacks.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-34103	29 May 201815:50	–	circl
CNNVD	Barco WePresent WiPG-1000 安全漏洞	15 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-34103 WePresent WiPG-1000 Unauthenticated Command Injection in via rdfs.cgi	15 Jul 202513:10	–	cvelist
EUVD	EUVD-2025-21423	3 Oct 202520:07	–	euvd
NVD	CVE-2025-34103	15 Jul 202513:15	–	nvd
Positive Technologies	PT-2025-29545 · Wepresent · Wepresent Wipg-1000	15 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-34103	17 Jul 202513:57	–	redhatcve
Vulnrichment	CVE-2025-34103 WePresent WiPG-1000 Unauthenticated Command Injection in via rdfs.cgi	15 Jul 202513:10	–	vulnrichment

Vulners

CNA

Node

wepresent wipg-1000Range0–2.2.3.0

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "Undocumented CGI interface (/cgi-bin/rdfs.cgi)"
    ],
    "product": "WiPG-1000",
    "vendor": "WePresent (Barco)",
    "versions": [
      {
        "lessThan": "2.2.3.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
vulncheck	www.vulncheck.com/advisories/we-present-wi-pg-1000-unauthenticated-command-injection
exploit-db	www.exploit-db.com/exploits/41935
redguard	www.redguard.ch/advisories/wepresent-wipg1000.txt
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/wipg1000_cmd_injection.rb

Parameter	Position	Path	Description	CWE
Client	query param	/cgi-bin/rdfs.cgi	Unauthenticated command injection via /cgi-bin/rdfs.cgi due to unsanitized Client parameter passed to a system call.	CWE-306, CWE-78

17 Jun 2026 09:13Current

8.1High risk

Vulners AI Score8.1

CVSS 49.3

EPSS0.04232

SSVC