CVE-2015-0929

time.htm in the web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a78 allows remote attackers to bypass authentication and obtain administrative access by leveraging a cookie received in an HTTP response.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cret@cert.org

Published

2015-02-03

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Hvg Video Gateway Firmware (Servision)

References

• http://www.kb.cert.org/vuls/id/522460