CVE-2020-28331: Barco wePresent WiPG-1600W devices have Improper Access Control.

Security readout for executives and security teams

A Barco wePresent WiPG-1600W running firmware 2.5.1.8 can be made to enable its hidden SSH service after reboot through a web POST parameter not exposed in the normal interface. That could turn a presentation device into an unexpected remote-access point. Public sources do not provide severity scoring, a fixed version, or evidence of active exploitation. Exposure is limited to Barco wePresent WiPG-1600W devices on affected firmware 2.5.1.8. Risk is higher where the device web interface is reachable from user, guest, or less-trusted networks. The provided sources do not identify other affected Barco models for this CVE. Prioritize review if these presentation devices are deployed in offices, conference rooms, or guest-adjacent networks. The issue can create an unexpected remote management surface, but urgency is constrained by incomplete severity data and no provided evidence of active exploitation. Mitigation focus: Identify WiPG-1600W devices and confirm firmware versions.; Restrict web management access to trusted administrative networks.; Check Barco guidance for fixed firmware or official mitigation..

Prepared

Jun 3, 2026, 04:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.