Critical severity · published Nov 24, 2020
CVE-2020-28333
Barco wePresent WiPG-1600W devices allow Authentication Bypass
9.8
CVSS
3.2%
EPSS
No
On KEV
Description
Barco wePresent WiPG-1600W devices allow Authentication Bypass. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-1600W web interface does not use session cookies for tracking authenticated sessions. Instead, the web interface uses a "SEID" token that is appended to the end of URLs in GET requests. Thus the "SEID" would be exposed in web proxy logs and browser history. An attacker that is able to capture the "SEID" and originate requests from the same IP address (via a NAT device or web proxy) would be able to access the user interface of the device without having to know the credentials.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WW
Wepresent Wipg-1600w Firmware · Barco
2.5.1.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-28333
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-28333
Third Party Advisory
http://packetstormsecurity.com/files/160161/Barco-wePresent-Authentication-Bypass.html
Third Party Advisory
https://korelogic.com/Resources/Advisories/KL-001-2020-006.txt
More from Wepresent Wipg-1600w Firmware
9.8
CVE-2019-3929
Crestron Multiple Products Command Injection Vulnerability
9.8
CVE-2020-28329
Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image
9.8
CVE-2020-28334
Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2)
9.8
CVE-2020-28332
Barco wePresent WiPG-1600W devices download code without an Integrity Check
9.8
CVE-2019-3930
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron…