How severe is CVE-2020-28331?

CVE-2020-28331 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability none.

Is CVE-2020-28331 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (74th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2020-28331?

CVE-2020-28331 affects Barco Wepresent Wipg-1600w Firmware. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2020-28331?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2020-28331 published?

CVE-2020-28331 was published on 2020-11-24 and last updated on 2026-06-17.

CVE-2020-28331

CVE-2020-28331 is a high-severity vulnerability in Barco Wepresent Wipg-1600w Firmware with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 3.x base score 7.5)
CVSS v2: 5.0
EPSS exploit prediction: 2% (74th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Barco Wepresent Wipg-1600w Firmware
Published: 2020-11-24
Last modified: 2026-06-17

Description

Barco wePresent WiPG-1600W devices have Improper Access Control. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-1600W device has an SSH daemon included in the firmware image. By default, the SSH daemon is disabled and does not start at system boot. The system initialization scripts read a device configuration file variable to see if the SSH daemon should be started. The web interface does not provide a visible capability to alter this configuration file variable. However, a malicious actor can include this variable in a POST such that the SSH daemon will be started when the device boots.

Frequently asked questions

What is CVE-2020-28331?: Barco wePresent WiPG-1600W devices have Improper Access Control. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-1600W device has an SSH daemon included in the firmware image. By default, the SSH daemon is disabled and does not start at system boot. The system initialization scripts read a device configuration file variable to see if the SSH daemon should be started. The web interface does not provide a visible capability to alter this configuration file variable. However, a malicious actor can include this variable in a POST such that the SSH daemon will be started when the device boots.
How severe is CVE-2020-28331?: CVE-2020-28331 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability none.
Is CVE-2020-28331 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (74th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2020-28331?: CVE-2020-28331 affects Barco Wepresent Wipg-1600w Firmware. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2020-28331?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2020-28331 published?: CVE-2020-28331 was published on 2020-11-24 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:o:barco:wepresent_wipg-1600w_firmware:2.5.1.8:*:*:*:*:*:*:*

More vulnerabilities in Barco Wepresent Wipg-1600w Firmware

CVE-2020-28329 — Critical (CVSS 9.8): Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting…
CVE-2020-28334 — Critical (CVSS 9.8): Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2). Affected Version(s): 2.5.1.8, 2.5.0.25,…
CVE-2020-28333 — Critical (CVSS 9.8): Barco wePresent WiPG-1600W devices allow Authentication Bypass. Affected Version(s): 2.5.1.8. The Barco wePresent…
CVE-2020-28332 — Critical (CVSS 9.8): Barco wePresent WiPG-1600W devices download code without an Integrity Check. Affected Version(s): 2.5.1.8, 2.5.0.25,…
CVE-2019-3930 — Critical (CVSS 9.8): The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10,…
CVE-2019-3929 — Critical (CVSS 9.8): The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10,…

All CVEs affecting Barco Wepresent Wipg-1600w Firmware →