Wepresent Wipg-1600w Firmware Security Vulnerabilities and Issues — Wepresent Wipg-1600w Firmware CVE List

Lucene search

BarcoWepresent Wipg-1600w Firmware

8 matches found

CVE•added 2019/04/30 9:29 p.m.•1032 views

CVE-2019-3929

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro ...

10CVSS9.8AI score0.93943EPSS

CVE•added 2020/11/24 7:15 p.m.•87 views

CVE-2020-28333

Barco wePresent WiPG-1600W devices allow Authentication Bypass. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-1600W web interface does not use session cookies for tracking authenticated sessions. Instead, the web interface uses a "SEID" token that is appended to the end of URLs in GET requ...

9.8CVSS9.2AI score0.01449EPSS

CVE•added 2020/11/24 6:15 p.m.•84 views

CVE-2020-28331

Barco wePresent WiPG-1600W devices have Improper Access Control. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-1600W device has an SSH daemon included in the firmware image. By default, the SSH daemon is disabled and does not start at system boot. The system initialization scripts read a d...

7.5CVSS8.2AI score0.00523EPSS

CVE•added 2020/11/24 8:15 p.m.•81 views

CVE-2020-28329

Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image. A malicious actor could use this password to access authenticated, administrative functions in the API. Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19...

9.8CVSS7.7AI score0.00706EPSS

CVE•added 2020/11/24 7:15 p.m.•79 views

CVE-2020-28330

Barco wePresent WiPG-1600W devices have Unprotected Transport of Credentials. Affected Version(s): 2.5.1.8. An attacker armed with hardcoded API credentials (retrieved by exploiting CVE-2020-28329) can issue an authenticated query to display the admin password for the main web user interface listen...

6.5CVSS7.7AI score0.00706EPSS

CVE•added 2020/11/24 7:15 p.m.•75 views

CVE-2020-28334

Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2). Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19. The Barco wePresent WiPG-1600W device has a hardcoded root password hash included in the firmware image. Exploiting CVE-2020-28329, CVE-2020-28330 and CVE-2020-2...

10CVSS7.8AI score0.13024EPSS

CVE•added 2020/11/24 7:15 p.m.•67 views

CVE-2020-28332

Barco wePresent WiPG-1600W devices download code without an Integrity Check. Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19. The Barco wePresent WiPG-1600W firmware does not perform verification of digitally signed firmware updates and is susceptible to processing and installing modifie...

9.8CVSS9.6AI score0.00213EPSS

CVE•added 2019/04/30 9:29 p.m.•47 views

CVE-2019-3930

10CVSS9.8AI score0.15337EPSS