CVE-2017-6351

The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password

published March 6, 2017

CVSS
—
EPSS
7%
Percentile
94.2
In the wild
Unconfirmed
What it is

The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password. Once the device is set to DEBUG mode, an attacker can connect to the device using the telnet protocol and log into the device with the 'abarco' hardcoded manufacturer account. This account is not documented, nor is the DEBUG feature or the use of telnetd on port tcp/5885.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07117 · 94.2th percentile
Published
2017-03-06T02:00Z
EPSS history
Timeline
  • 06 MAR 02:00Z
    The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password
    cvelistv5