CVE-2015-1469
HighSummary
In the web interface on SerVision HVG Video Gateway devices with firmware through version 2.2.26a100, remote authenticated users can gain elevated privileges by leveraging a cookie received in an HTTP response.
Risk Assessment
This vulnerability may allow unauthorized access to system resources by authenticated users, posing a serious threat to data security.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability and to monitor system access.
Other vulnerabilities in SerVision HVG Video Gateway
See all- CVE-2015-0930High
The web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a100 has a hardcoded administrative password, which makes it easier for remote attackers to obtain access via an HTTP session.
- CVE-2015-0929High
The web interface on SerVision HVG Video Gateway devices with firmware before version 2.2.26a78 has a vulnerability that allows remote attackers to bypass authentication and gain administrative access by leveraging a cookie received in an HTTP response.
Original NVD description (English source)
time.htm in the web interface on SerVision HVG Video Gateway devices with firmware through 2.2.26a100 allows remote authenticated users to gain privileges by leveraging a cookie received in an HTTP response, a different vulnerability than CVE-2015-0929 and CVE-2015-0930.