CVE-2015-1469

2015-02-0322:59:05

CWE-264

mitre

web.nvd.nist.gov

cve-2015-1469

servision hvg

video gateway

firmware

privilege escalation

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.004

Percentile

75.3%

JSON

time.htm in the web interface on SerVision HVG Video Gateway devices with firmware through 2.2.26a100 allows remote authenticated users to gain privileges by leveraging a cookie received in an HTTP response, a different vulnerability than CVE-2015-0929 and CVE-2015-0930.

Affected configurations

Nvd

Node

servisionhvg_video_gateway_firmwareRange≤2.2.26a100

AND

servisionhvg400

VendorProductVersionCPE
servisionhvg_video_gateway_firmware*cpe:2.3:o:servision:hvg_video_gateway_firmware:*:*:*:*:*:*:*:*
servisionhvg400*cpe:2.3:h:servision:hvg400:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
servision	hvg_video_gateway_firmware	*	cpe:2.3:o:servision:hvg_video_gateway_firmware::::::::
servision	hvg400	*	cpe:2.3:h:servision:hvg400::::::::