CVE-2015-0930
HighSummary
The web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a100 has a hardcoded administrative password, which makes it easier for remote attackers to obtain access via an HTTP session.
Risk Assessment
The presence of a hardcoded password increases the risk of unauthorized access to the devices, potentially leading to serious security breaches.
Recommendation
It is recommended to update the firmware to version 2.2.26a100 or later to eliminate the hardcoded administrative password.
Other vulnerabilities in SerVision HVG Video Gateway
See all- CVE-2015-1469High
In the web interface on SerVision HVG Video Gateway devices with firmware through version 2.2.26a100, remote authenticated users can gain elevated privileges by leveraging a cookie received in an HTTP response.
- CVE-2015-0929High
The web interface on SerVision HVG Video Gateway devices with firmware before version 2.2.26a78 has a vulnerability that allows remote attackers to bypass authentication and gain administrative access by leveraging a cookie received in an HTTP response.
Original NVD description (English source)
The web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a100 has a hardcoded administrative password, which makes it easier for remote attackers to obtain access via an HTTP session.