CVE-2015-2909
9.8
CRITICAL · CVSS 3.1 · EPSS 2.9% (pctl 87)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures login credentials, which makes it easier for remote attackers to obtain access by leveraging situations in which this warning was not heeded. NOTE: the vendor states "The user is presented with clear warnings on the GUI that they should set usernames and passwords."
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 2.94% — more likely to be exploited than 87% of all CVEs |
| Weakness | CWE-269 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2020-02-06 |
| Last modified | 2026-06-17 |
Affected (40)
| Vendor | Product |
|---|---|
| netvu | ds2 \(dvtr\) |
| netvu | ds2 \(dvtr\) firmware |
| netvu | ds2 \(dvtu\) |
| netvu | ds2 \(dvtu\) firmware |
| netvu | ds2 \(dvtx\) |
| netvu | ds2 \(dvtx\) firmware |
| netvu | ds2 \(dvtx\) netvu connected |
| netvu | ds2 \(dvtx\) netvu connected firmware |
| netvu | ds2 \(m2ip\) |
| netvu | ds2 \(m2ip\) firmware |
| netvu | dv-ip express |
| netvu | dv-ip express firmware |
| netvu | ecosense 4\/8\/16 \(m4t\) |
| netvu | ecosense 4\/8\/16 \(m4t\) firmware |
| netvu | sd 32 \(m3g\) |
| netvu | sd 32 \(m3g\) firmware |
| netvu | sd 32 \(m3h\) |
| netvu | sd 32 \(m3h\) firmware |
| netvu | sd 4 \(m3s\) |
| netvu | sd 4 \(m3s\) firmware |
| netvu | sd 4 \(m3t\) |
| netvu | sd 4 \(m3t\) firmware |
| netvu | sd 8\/12\/16 no kbd \(m3r\) |
| netvu | sd 8\/12\/16 no kbd \(m3r\) firmware |
| netvu | sd 8\/12\/16 no kbd \(m3s\) |
| netvu | sd 8\/12\/16 no kbd \(m3s\) firmware |
| netvu | sd 8\/16 front panel kbd \(m3r\) |
| netvu | sd 8\/16 front panel kbd \(m3r\) firmware |
| netvu | sd 8\/16 front panel kbd \(m3u\) |
| netvu | sd 8\/16 front panel kbd \(m3u\) firmware |
| netvu | sd advanced closed iptv \(m3u\) |
| netvu | sd advanced closed iptv \(m3u\) firmware |
| netvu | sd advanced non closed iptv \(m3u\) |
| netvu | sd advanced non closed iptv \(m3u\) firmware |
| netvu | sd advanced nvr |
| netvu | sd advanced nvr firmware |
| netvu | sd-advanced - sdhd |
| netvu | sd-advanced - sdhd firmware |
| netvu | sd-advanced 8\/12\/16 vga |
| netvu | sd-advanced 8\/12\/16 vga firmware |
References
→ the Explorer · watch your stack · NVD