10
CVSSv2

CVE-2015-2909

Published: 06/02/2020 Updated: 12/02/2020
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures login credentials, which makes it easier for remote malicious users to obtain access by leveraging situations in which this warning was not heeded. NOTE: the vendor states "The user is presented with clear warnings on the GUI that they should set usernames and passwords."

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

netvu dv-ip express firmware -

netvu sd-advanced - sdhd firmware -

netvu sd-advanced 8/12/16 vga firmware -

netvu sd advanced closed iptv (m3u) firmware -

netvu sd advanced non closed iptv (m3u) firmware -

netvu sd advanced nvr firmware -

netvu sd 32 (m3g) firmware -

netvu sd 32 (m3h) firmware -

netvu sd 4 (m3s) firmware -

netvu sd 4 (m3t) firmware -

netvu sd 8/12/16 no kbd (m3r) firmware -

netvu sd 8/12/16 no kbd (m3s) firmware -

netvu sd 8/16 front panel kbd (m3r) firmware -

netvu sd 8/16 front panel kbd (m3u) firmware -

netvu ecosense 4/8/16 (m4t) firmware -

netvu ds2 (dvtr) firmware -

netvu ds2 (dvtu) firmware -

netvu ds2 (dvtx) firmware -

netvu ds2 (dvtx) netvu connected firmware -

netvu ds2 (m2ip) firmware -