PatchTheCVECVE-2017-6351: The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username
CVE-2017-6351 is a high-severity flaw (CVSS 8.1) affecting wipg-1500 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password. Once the device is set to DEBUG mode, an attacker can connect to the device using the telnet protocol and log into the device with the 'abarco' hardcoded manufacturer account. This account is not documented, nor is the DEBUG feature or the use of telnetd on port tcp/5885.
Why this priority
- High severity
- EPSS top 6%: very likely to be exploited
- Public exploit reference
- Remotely exploitable, no login, no user action
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 8.1 (High) |
| Attack vector | Network (remote) |
| Attack complexity | High |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 7.1% (top 6%) |
| CISA exploited list | No |
| Weakness | CWE-798 |
| Published | 2017-03-06 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Exploit-DB: WePresent WiPG-1500 - Backdoor Account
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2017-6351?
wipg-1500 firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2017-6351 being exploited?
CVE-2017-6351 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2017-6351 affect?
CVE-2017-6351 affects wipg-1500 firmware. Severity is high (CVSS 8.1). The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password. Once the device is set to DEBUG mode, an attacker can connect to the device using the telnet protocol and log into the
How urgent is CVE-2017-6351?
Priority 62/100. High severity; EPSS top 6%: very likely to be exploited; Public exploit reference; Remotely exploitable, no login, no user action