Vulnerability Intelligence Report
CVE-2015-2909
Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures login credentials, which makes it easier for remote attackers to obtain access by leveraging situations in which this warning was not heeded. NOTE: the vendor states "The user is presented with clear warnings on the GUI that they should set usernames and passwords."
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
EPSS Probability:2.94%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Dedicated Micros | DV-IP Express | unknown (affected) |
| Dedicated Micros | SD Advanced | unknown (affected) |
| Dedicated Micros | SD | unknown (affected) |
| Dedicated Micros | EcoSense | unknown (affected) |
| Dedicated Micros | DS2 | unknown (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
2.941%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | CERT/CC · CERT · USA |
| Reserved | 2015-04-03T00:00:00 |
| Published | 2020-02-06T14:14:50 |
| Patch Date | 2015-08-20 |
| Last Updated | 2024-08-06T05:32:20 |
Community Chatter & Buzz