PT-2020-16977 · Barco · Barco Wepresent Wipg-1600W

Published 2020-11-24 · Updated 2020-12-03 · CVE-2020-28330

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Barco wePresent WiPG-1600W version 2.5.1.8

Description The issue concerns unprotected transport of credentials. An attacker can exploit this to issue an authenticated query and display the admin password for the main web user interface, which listens on port 443/tcp.

Recommendations For version 2.5.1.8, as a temporary workaround, consider restricting access to the admin interface until a patch is available.

Exploit

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2020-28330

Affected Products

Barco Wepresent Wipg-1600W

References · 9

• 🔥 https://korelogic.com/Resources/Advisories/KL-001-2020-005.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-28330 · Security Note
• https://osv.dev/vulnerability/CVE-2020-28330 · Vendor Advisory
• https://t.me/cvenotify/6141 · Telegram Post
• https://t.me/cvenotify/6143 · Telegram Post
• https://t.me/cvenotify/6537 · Telegram Post
• https://t.me/cvenotify/6160 · Telegram Post
• https://t.me/cibsecurity/16814 · Telegram Post
• https://t.me/cibsecurity/16813 · Telegram Post