CVE-2017-6351

HIGH

WePresent WiPG-1500 - Backdoor Account

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2017-6351 has a selected CVSS score of 8.1 (high); EIP currently links 1 catalogued exploit.

Description

The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password. Once the device is set to DEBUG mode, an attacker can connect to the device using the telnet protocol and log into the device with the 'abarco' hardcoded manufacturer account. This account is not documented, nor is the DEBUG feature or the use of telnetd on port tcp/5885.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBWePresent WiPG-1500 - Backdoor AccountExploitDB exploitby Quentin OlagneNot analyzed1 file
ExploitDB
PoC details

References

4