CVE-2015-0929

EPSS 1.02%
Veröffentlicht 03.02.2015 22:59:03
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cret@cert.org
CVE-Watchlists
Login
Unerledigt
Login

time.htm in the web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a78 allows remote attackers to bypass authentication and obtain administrative access by leveraging a cookie received in an HTTP response.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Servision ≫ Hvg Video Gateway Firmware Version <= 2.2.26a77

Servision ≫ Hvg400 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.02%	0.766

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://www.kb.cert.org/vuls/id/522460

Third Party Advisory

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2015-0929

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-0929

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-0929

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-0929