CVE-2020-28333: Barco wePresent WiPG-1600W devices allow Authentication Bypass.

Security readout for executives and security teams

Barco wePresent WiPG-1600W version 2.5.1.8 can expose a login token in URLs. If someone can obtain that token from browser history or proxy logs and appears from the same IP address, they may access the device web interface without credentials. Exposure is most likely where WiPG-1600W management interfaces are reachable by shared networks, proxies, or users whose browser history or proxy logs are accessible. Prioritize remediation if these devices manage meeting-room presentation systems on shared corporate networks. The issue is not listed as actively exploited, but credential-free interface access can create operational and privacy risk. Mitigation focus: Identify any Barco wePresent WiPG-1600W devices running version 2.5.1.8.; Check Barco or device support channels for firmware guidance or replacement recommendations.; Restrict access to the device web interface to trusted administration networks..

Prepared

Jun 3, 2026, 04:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.