CVE-2020-28334: Barco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2).

Security readout for executives and security teams

Some Barco wePresent WiPG-1600W wireless presentation devices contain a hard-coded root password hash in firmware. In combination with related vulnerabilities, sources say an unauthenticated remote attacker could potentially reach a root shell. This mainly matters where these meeting-room devices are still deployed and reachable from user, guest, or external networks. Exposure is likely limited to organizations still running affected WiPG-1600W firmware. Risk rises if device management or SSH-related access is reachable from guest Wi-Fi, office networks, or the internet instead of a tightly isolated AV management segment. Prioritize if these devices exist in conference rooms or guest-facing networks. A reachable affected device could become an internal foothold with root-level control. If the product is absent or fully isolated, urgency is lower but inventory confirmation is still needed. Mitigation focus: Inventory Barco wePresent WiPG-1600W devices and record firmware versions.; Check Barco or reseller guidance for fixed firmware or replacement direction.; Isolate presentation devices from guest, user, and internet-reachable networks..

Prepared

Jun 3, 2026, 04:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.