Philips In.sight b120\37 vulnerabilities

3 CVEs affecting Philips In.sight b120\37, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-2884, published 2017-04-10.

More from Philips.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-2882, published 2017-04-10. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. Philips In.Sight B120/37 has a password of b120root for the backdoor root account, a password of /ADMIN/ for the backdoor admin account, a password of merlin for the backdoor mg3500 account, a…
• CVE-2015-2884, published 2017-04-10. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Philips In.Sight B120/37 allows remote attackers to obtain sensitive information via a direct request, related to yoics.net URLs, stream.m3u8 URIs, and cam_service_enable.cgi.
• CVE-2015-2883, published 2017-04-10. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. Philips In.Sight B120/37 has XSS, related to the Weaved cloud web service, as demonstrated by the name parameter to deviceSettings.php or shareDevice.php.