Barco Wepresent Wipg-1600w Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Barco Wepresent Wipg-1600w Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2019-3929 — CVSS 9.8 (critical) — actively exploited: The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent…
• CVE-2019-3930 — CVSS 9.8 (critical): The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent…
• CVE-2020-28329 — CVSS 9.8 (critical): Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image. A…
• CVE-2020-28333 — CVSS 9.8 (critical): Barco wePresent WiPG-1600W devices allow Authentication Bypass. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-1600W web interface…
• CVE-2020-28334 — CVSS 9.8 (critical): Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2). Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19…
• CVE-2020-28332 — CVSS 9.8 (critical): Barco wePresent WiPG-1600W devices download code without an Integrity Check. Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19…
• CVE-2020-28331 — CVSS 7.5 (high): Barco wePresent WiPG-1600W devices have Improper Access Control. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-1600W device has an…
• CVE-2020-28330 — CVSS 6.5 (medium): Barco wePresent WiPG-1600W devices have Unprotected Transport of Credentials. Affected Version(s): 2.5.1.8. An attacker armed with…