PT-2015-5307 · Servision · Hvg Video Gateway Firmware

Richard Tafoya · Publicado 2015-02-03 · Atualizado 2015-02-04 · CVE-2015-1469

NVD

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

time.htm in the web interface on SerVision HVG Video Gateway devices with firmware through 2.2.26a100 allows remote authenticated users to gain privileges by leveraging a cookie received in an HTTP response, a different vulnerability than CVE-2015-0929 and CVE-2015-0930.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-1469

Produtos afetados

Hvg Video Gateway Firmware

Referências · 2

• http://kb.cert.org/vuls/id/522460 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-1469 · Nota de Segurança