Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2017-6351 Details

Description

The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password. Once the device is set to DEBUG mode, an attacker can connect to the device using the telnet protocol and log into the device with the 'abarco' hardcoded manufacturer account. This account is not documented, nor is the DEBUG feature or the use of telnetd on port tcp/5885.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:8.1 HIGHVector:CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://www.exploit-db.com/exploits/41480/ CVE
http://www.securityfocus.com/bid/96588 CVEThird Party AdvisoryVDB Entry
http://www.wepresentwifi.com/ CVEVendor Advisory
https://www.exploit-db.com/exploits/41480/ [email protected]
http://www.securityfocus.com/bid/96588 [email protected]Third Party AdvisoryVDB Entry

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-798Use of Hard-coded Credentials[email protected]

Affected Products

ProductVersions
wepresent wipg-1500 firmware
1.0.3.7

CPE

  • cpe:2.3:o:wepresent:wipg-1500_firmware:1.0.3.7:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
wepresent wipg-1500
All versions

CPE

  • cpe:2.3:h:wepresent:wipg-1500:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2017-6351
NVD Published Date:
Mar 6, 2017
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]