CVE-2020-28334

Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2). Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19. The Barco wePresent WiPG-1600W device has a hardcoded root password hash included in the firmware image. Exploiting CVE-2020-28329, CVE-2020-28330 and CVE-2020-28331 could potentially be used in a simple and automated exploit chain to go from unauthenticated remote attacker to root shell.

• CWE-798

• http://packetstormsecurity.com/files/160163/Barco-wePresent-Global-Hardcoded-Root-SSH-Password.htmlExploit, Third Party Advisory, VDB Entry
• https://korelogic.com/Resources/Advisories/KL-001-2020-008.txtExploit, Third Party Advisory
• http://packetstormsecurity.com/files/160163/Barco-wePresent-Global-Hardcoded-Root-SSH-Password.htmlExploit, Third Party Advisory, VDB Entry
• https://korelogic.com/Resources/Advisories/KL-001-2020-008.txtExploit, Third Party Advisory

Published

Nov 24, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-28329Barco wePresent WiPG-1600W firmware includes a hardcoded API…9.8
• CVE-2020-2833Vulnerability in the Oracle Quoting product of Oracle E-Busi…8.2
• CVE-2020-28330Barco wePresent WiPG-1600W devices have Unprotected Transpor…6.5
• CVE-2020-28331Barco wePresent WiPG-1600W devices have Improper Access Cont…7.5
• CVE-2020-28332Barco wePresent WiPG-1600W devices download code without an …9.8
• CVE-2020-28333Barco wePresent WiPG-1600W devices allow Authentication Bypa…9.8
• CVE-2020-28337A directory traversal issue in the Utils/Unzip module in Mic…7.2
• CVE-2020-28339The usc-e-shop (aka Collne Welcart e-Commerce) plugin before…8.8
• CVE-2020-2834Vulnerability in the Oracle Marketing product of Oracle E-Bu…8.2
• CVE-2020-28340An issue was discovered on Samsung mobile devices with O(8.x…9.8
• CVE-2020-28341An issue was discovered on Samsung mobile devices with Q(10.…7.8
• CVE-2020-28342An issue was discovered on Samsung mobile devices with P(9.0…7.8