Philips In.Sight B120\37 vulnerabilities

3 vulnerabilities

Known vulnerabilities in Philips In.Sight B120\37, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2015-2883philipsin.sight_b120\37
EPSS score
0.50%
Philips In.Sight B120/37 has XSS, related to the Weaved cloud web service, as demonstrated by the name parameter to deviceSettings.php or shareDevice.php.10CVE-2015-2882philipsin.sight_b120\37
EPSS score
1.57%
Philips In.Sight B120/37 has a password of b120root for the backdoor root account, a password of /ADMIN/ for the backdoor admin account, a password of merlin for the backdoor mg3500 account, a password of M100-4674448 for the backdoor user account, and a password of M100-4674448 for the backdoor admin account.7.5CVE-2015-2884philipsin.sight_b120\37
EPSS score
1.46%
Philips In.Sight B120/37 allows remote attackers to obtain sensitive information via a direct request, related to yoics.net URLs, stream.m3u8 URIs, and cam_service_enable.cgi.