by Kastro
Paper/Archive/CVE-2025-34103

CVE-2025-34103

WePresent (Barco) WiPG-1000 — WePresent WiPG-1000 Unauthenticated Command Injection in via rdfs.cgi

EPSS 6%public exploitCVSS 9.3
critical.is priorityof 100
57
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 93.2.932 × 2018.6Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

An unauthenticated command injection vulnerability exists in WePresent WiPG-1000 firmware versions prior to 2.2.3.0, due to improper input handling in the undocumented /cgi-bin/rdfs.cgi endpoint. The Client parameter is not sanitized before being passed to a system call, allowing an unauthenticated remote attacker to execute arbitrary commands as the web server user.

Affected

ProductAffectedFixed inSource
WiPG-1000< 2.2.3.02.2.3.0CNA

Scores by source

VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

writeupredguard.ch/advisories/wepresent-wipg1000.txtexploitraw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/wipg1000_cmd_injection.rbexploitexploit-db.com/exploits/41935writeupvulncheck.com/advisories/we-present-wi-pg-1000-unauthenticated-command-injection