CVEvulnerability

CVE-2015-0929

10.0 HIGH Published 2015-02-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-02-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-284

Description

time.htm in the web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a78 allows remote attackers to bypass authentication and obtain administrative access by leveraging a cookie received in an HTTP response.

Affected configurations

• servision hvg video gateway firmware (<= 2.2.26a77)

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References