CVE-2015-2883
Philips In.Sight B120/37 has XSS, related to the Weaved cloud web service, as demonstrated by the name parameter to deviceSettings.php or shareDevice.php.
- Score
- CVSS 3.0 5.4 Medium
- Status
- Modified - cret@cert.org
- Published
- 2017-04-10
- Last modified
- 2024-08-06
- Weaknesses
- CWE-79
Affected products
References
- https://community.rapid7.com/community/infosec/blog/2015/09/02/iotsec-disclosure-10-new-vulns-for-several-video-baby-mo…