Lucene search
PRIOn knowledge basePRION:CVE-2017-6351HistoryMar 06, 2017 - 2:59 a.m.
Hardcoded credentials
2017-03-0602:59:00
PRIOn knowledge base
www.prio-n.com
5
The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password. Once the device is set to DEBUG mode, an attacker can connect to the device using the telnet protocol and log into the device with the ‘abarco’ hardcoded manufacturer account. This account is not documented, nor is the DEBUG feature or the use of telnetd on port tcp/5885.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wipg-1500_firmware | eq | 1.0.3.7 |
Related
packetstorm
packetstorm
WePresent WiPG-1500 Backdoor Account
2017-03-01 00:00:00
cve
cve
CVE-2017-6351
2017-03-06 02:59:00
exploitpack
exploitpack
WePresent WiPG-1500 - Backdoor Account
2017-02-27 00:00:00
nvd
nvd
CVE-2017-6351
2017-03-06 02:59:00
zdt
zdt
WePresent WiPG-1500 - Backdoor Account Vulnerability
2017-03-01 00:00:00
cvelist
cvelist
CVE-2017-6351
2017-03-06 02:00:00
exploitdb
exploitdb
WePresent WiPG-1500 - Backdoor Account
2017-02-27 00:00:00