CVE-2017-6351

The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password. Once the device is set to DEBUG mode, an attacker can connect to the device using the telnet protocol and log into the device with the 'abarco' hardcoded manufacturer account. This account is not documented, nor is the DEBUG feature or the use of telnetd on port tcp/5885.

• CWE-798

• http://www.securityfocus.com/bid/96588Third Party Advisory, VDB Entry
• http://www.wepresentwifi.com/Vendor Advisory
• https://www.exploit-db.com/exploits/41480/
• http://www.securityfocus.com/bid/96588Third Party Advisory, VDB Entry
• http://www.wepresentwifi.com/Vendor Advisory
• https://www.exploit-db.com/exploits/41480/

Published

Mar 6, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6345The LLC subsystem in the Linux kernel before 4.9.13 does not…
• CVE-2017-6346Race condition in net/packet/af_packet.c in the Linux kernel…7
• CVE-2017-6347The ip_cmsg_recv_checksum function in net/ipv4/ip_sockglue.c…7.8
• CVE-2017-6348The hashbin_delete function in net/irda/irqueue.c in the Lin…
• CVE-2017-6349An integer overflow at a u_read_undo memory allocation site …
• CVE-2017-6350An integer overflow at an unserialize_uep memory allocation …
• CVE-2017-6353net/sctp/socket.c in the Linux kernel through 4.10.1 does no…
• CVE-2017-6355Integer overflow in the vrend_create_shader function in vren…
• CVE-2017-6356Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0…5.3
• CVE-2017-6359QNAP QTS before 4.2.4 Build 20170313 allows attackers to gai…
• CVE-2017-6360QNAP QTS before 4.2.4 Build 20170313 allows attackers to gai…
• CVE-2017-6361QNAP QTS before 4.2.4 Build 20170313 allows attackers to exe…