CVE-2020-28332

Опубликовано: 24 нояб. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Barco wePresent WiPG-1600W devices download code without an Integrity Check. Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19. The Barco wePresent WiPG-1600W firmware does not perform verification of digitally signed firmware updates and is susceptible to processing and installing modified/malicious images.

Ссылки

http://packetstormsecurity.com/files/160164/Barco-wePresent-Insecure-Firmware-Image.html
Exploit
Third Party Advisory
VDB Entry
https://korelogic.com/Resources/Advisories/KL-001-2020-009.txt
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/160164/Barco-wePresent-Insecure-Firmware-Image.html
Exploit
Third Party Advisory
VDB Entry
https://korelogic.com/Resources/Advisories/KL-001-2020-009.txt
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:barco:wepresent_wipg-1600w_firmware:2.5.1.8:*:*:*:*:*:*:*

cpe:2.3:h:barco:wepresent_wipg-1600w:-:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00213

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-494

Связанные уязвимости

GHSA-3j95-8976-jfmp

github

больше 3 лет назад