CVE-2015-2909: Netvu DS2 (dvtr) Firmware

Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days.

Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures login credentials, which makes it easier for remote attackers to obtain access by leveraging situations in which this warning was not heeded. NOTE: the vendor states "The user is presented with clear warnings on the GUI that they should set usernames and passwords."

Affected products

• Netvu DS2 (dvtr) Firmware: affected versions not specified
• Netvu DS2 (dvtu) Firmware: affected versions not specified
• Netvu DS2 (dvtx) Firmware: affected versions not specified
• Netvu DS2 (dvtx) Netvu Connected Firmware: affected versions not specified
• Netvu DS2 (m2ip) Firmware: affected versions not specified
• Netvu Dv-IP Express Firmware: affected versions not specified
• Netvu Ecosense 4/8/16 (m4t) Firmware: affected versions not specified
• Netvu Sd-Advanced - Sdhd Firmware: affected versions not specified
• Netvu Sd-Advanced 8/12/16 Vga Firmware: affected versions not specified
• Netvu Sd 32 (m3g) Firmware: affected versions not specified
• Netvu Sd 32 (m3h) Firmware: affected versions not specified
• Netvu Sd 4 (m3s) Firmware: affected versions not specified
• Netvu Sd 4 (m3t) Firmware: affected versions not specified
• Netvu Sd 8/12/16 No Kbd (m3r) Firmware: affected versions not specified
• Netvu Sd 8/12/16 No Kbd (m3s) Firmware: affected versions not specified
• Netvu Sd 8/16 Front Panel Kbd (m3r) Firmware: affected versions not specified
• Netvu Sd 8/16 Front Panel Kbd (m3u) Firmware: affected versions not specified
• Netvu Sd Advanced Closed Iptv (m3u) Firmware: affected versions not specified
• Netvu Sd Advanced Non Closed Iptv (m3u) Firmware: affected versions not specified
• Netvu Sd Advanced NVR Firmware: affected versions not specified

Published 2020-02-06. Last modified 2026-06-17.