PT-2020-16978 · Barco · Barco Wepresent Wipg-1600W

Jim Becher + 1 · Published 2020-11-24 · Updated 2022-07-12 · CVE-2020-28331

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Barco wePresent WiPG-1600W version 2.5.1.8

Description The issue concerns improper access control in the Barco wePresent WiPG-1600W device. The device includes an SSH daemon in its firmware image, which is disabled by default and does not start at system boot. However, a malicious actor can manipulate the device configuration by including a specific variable in a POST request, causing the SSH daemon to start when the device boots. This could potentially allow unauthorized access to the device.

Recommendations For version 2.5.1.8, as a temporary workaround, consider disabling any functionality that could be used to start the SSH daemon until a patch is available. Restrict access to the device's configuration to minimize the risk of exploitation. Avoid using the web interface to alter the device configuration until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-28331

Affected Products

Barco Wepresent Wipg-1600W

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2020-28331 · Security Note
• https://osv.dev/vulnerability/CVE-2020-28331 · Vendor Advisory
• https://korelogic.com/Resources/Advisories/KL-001-2020-007.txt · Note
• https://t.me/cvenotify/6141 · Telegram Post
• https://t.me/cvenotify/6540 · Telegram Post
• https://t.me/cvenotify/6537 · Telegram Post
• https://t.me/cibsecurity/16813 · Telegram Post
• https://t.me/cibsecurity/16798 · Telegram Post
• http://packetstormsecurity.com/files/160162/Barco-wePresent-Undocumented-SSH-Interface.html · Note