CVE-2015-2884

High

Published: 10/04/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Philips In.Sight B120/37 allows remote attackers to obtain sensitive information via a direct request, related to yoics.net URLs, stream.m3u8 URIs, and cam_service_enable.cgi.

Risk Assessment

Attackers may gain access to confidential data, potentially leading to user privacy breaches and further attacks on the system.

Recommendation

It is recommended to update the device firmware and restrict access to interfaces that allow direct requests.

Other vulnerabilities in Philips In.Sight B120/37

CVE-2015-2882Critical
The Philips In.Sight B120/37 device has several accounts with default passwords that are easy to guess. Among them are passwords for root, admin, and user accounts, posing a serious security risk.

Original NVD description (English source)

Philips In.Sight B120/37 allows remote attackers to obtain sensitive information via a direct request, related to yoics.net URLs, stream.m3u8 URIs, and cam_service_enable.cgi.