CVE-2015-0929
HighSummary
The web interface on SerVision HVG Video Gateway devices with firmware before version 2.2.26a78 has a vulnerability that allows remote attackers to bypass authentication and gain administrative access by leveraging a cookie received in an HTTP response.
Risk Assessment
Organizations may be exposed to unauthorized access to systems, potentially leading to data loss or unauthorized changes to device configurations.
Recommendation
It is recommended to update the firmware to version 2.2.26a78 or later to secure the devices against this threat.
Other vulnerabilities in SerVision HVG Video Gateway
See all- CVE-2015-1469High
In the web interface on SerVision HVG Video Gateway devices with firmware through version 2.2.26a100, remote authenticated users can gain elevated privileges by leveraging a cookie received in an HTTP response.
- CVE-2015-0930High
The web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a100 has a hardcoded administrative password, which makes it easier for remote attackers to obtain access via an HTTP session.
Original NVD description (English source)
time.htm in the web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a78 allows remote attackers to bypass authentication and obtain administrative access by leveraging a cookie received in an HTTP response.