CVE-2015-2909 Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures login credentials, which makes it easier for remote at...
CriticalCVSS 9.8
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures login credentials, which makes it easier for remote attackers to obtain access by leveraging situations in which this warning was not heeded. NOTE: the vendor states "The user is presented with clear warnings on the GUI that they should set usernames and passwords."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netvu dv-ip express firmware | All versions | No fix listed |
| netvu sd-advanced - sdhd firmware | All versions | No fix listed |
| netvu sd-advanced 81216 vga firmware | All versions | No fix listed |
| netvu sd advanced closed iptv m3u firmware | All versions | No fix listed |
| netvu sd advanced non closed iptv m3u firmware | All versions | No fix listed |
| netvu sd advanced nvr firmware | All versions | No fix listed |
| netvu sd 32 m3g firmware | All versions | No fix listed |
| netvu sd 32 m3h firmware | All versions | No fix listed |
| netvu sd 4 m3s firmware | All versions | No fix listed |
| netvu sd 4 m3t firmware | All versions | No fix listed |
| netvu sd 81216 no kbd m3r firmware | All versions | No fix listed |
| netvu sd 81216 no kbd m3s firmware | All versions | No fix listed |
| netvu sd 816 front panel kbd m3r firmware | All versions | No fix listed |
| netvu sd 816 front panel kbd m3u firmware | All versions | No fix listed |
| netvu ecosense 4816 m4t firmware | All versions | No fix listed |
| netvu ds2 dvtr firmware | All versions | No fix listed |
| netvu ds2 dvtu firmware | All versions | No fix listed |
| netvu ds2 dvtx firmware | All versions | No fix listed |
| netvu ds2 dvtx netvu connected firmware | All versions | No fix listed |
| netvu ds2 m2ip firmware | All versions | No fix listed |
| Dedicated Micros DV-IP Express | All versions | No fix listed |
| Dedicated Micros SD Advanced | All versions | No fix listed |
| Dedicated Micros SD | All versions | No fix listed |
| Dedicated Micros EcoSense | All versions | No fix listed |
| Dedicated Micros DS2 | All versions | No fix listed |
References
- cybergibbons.com exploit third-party-advisory
- www.kb.cert.org third-party-advisory us-government-resource