CVEvulnerability

CVE-2015-2909

9.8 CRITICAL Published 2020-02-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-02-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-269

Description

Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures login credentials, which makes it easier for remote attackers to obtain access by leveraging situations in which this warning was not heeded. NOTE: the vendor states "The user is presented with clear warnings on the GUI that they should set usernames and passwords."

Affected configurations

• netvu dv-ip express firmware • netvu sd-advanced - sdhd firmware • netvu sd-advanced 8\/12\/16 vga firmware • netvu sd advanced closed iptv \(m3u\) firmware • netvu sd advanced non closed iptv \(m3u\) firmware • netvu sd advanced nvr firmware • netvu sd 32 \(m3g\) firmware • netvu sd 32 \(m3h\) firmware • netvu sd 4 \(m3s\) firmware • netvu sd 4 \(m3t\) firmware • netvu sd 8\/12\/16 no kbd \(m3r\) firmware • netvu sd 8\/12\/16 no kbd \(m3s\) firmware • netvu sd 8\/16 front panel kbd \(m3r\) firmware • netvu sd 8\/16 front panel kbd \(m3u\) firmware • netvu ecosense 4\/8\/16 \(m4t\) firmware • netvu ds2 \(dvtr\) firmware • netvu ds2 \(dvtu\) firmware • netvu ds2 \(dvtx\) firmware • netvu ds2 \(dvtx\) netvu connected firmware • netvu ds2 \(m2ip\) firmware

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References