CVE-2020-28329

Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image. A malicious actor could use this password to access authenticated, administrative functions in the API. Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19.

• CWE-798

• https://korelogic.com/Resources/Advisories/KL-001-2020-004.txtExploit, Third Party Advisory
• https://korelogic.com/Resources/Advisories/KL-001-2020-004.txtExploit, Third Party Advisory

Published

Nov 24, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-28323Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-28324Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-28325Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-28326Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-28327A res_pjsip_session crash was discovered in Asterisk Open So…5.3
• CVE-2020-28328SuiteCRM before 7.11.17 is vulnerable to remote code executi…8.8
• CVE-2020-2833Vulnerability in the Oracle Quoting product of Oracle E-Busi…8.2
• CVE-2020-28330Barco wePresent WiPG-1600W devices have Unprotected Transpor…6.5
• CVE-2020-28331Barco wePresent WiPG-1600W devices have Improper Access Cont…7.5
• CVE-2020-28332Barco wePresent WiPG-1600W devices download code without an …9.8
• CVE-2020-28333Barco wePresent WiPG-1600W devices allow Authentication Bypa…9.8
• CVE-2020-28334Barco wePresent WiPG-1600W devices use Hard-coded Credential…9.8