CVE-2015-1469

time.htm in the web interface on SerVision HVG Video Gateway devices with firmware through 2.2.26a100 allows remote authenticated users to gain privileges by leveraging a cookie received in an HTTP response, a different vulnerability than CVE-2015-0929 and CVE-2015-0930.

Score

CVSS 2.0 9.0 Critical

Status

Modified - cve@mitre.org

Published

2015-02-03

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Hvg Video Gateway Firmware (Servision)

References

• http://www.kb.cert.org/vuls/id/522460