VendorsPhilipsin.sight_b120%5C%5C37all versions
Vulnerabilities

Philips In.Sight B120\37

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

3CVEs
CVE-2015-2882
Philips In.Sight B120/37 has a password of b120root for the backdoor root account, a password of /ADMIN/ for the backdoor admin account, a password of merlin for the backdoor mg3500 account, a password of M100-4674448 for the backdoor user account, and a password of M100-4674448 for the backdoor admin account.
Published 2017-04-10 · Modified
10.0EPSS 0.016
CVE-2015-2884
Philips In.Sight B120/37 allows remote attackers to obtain sensitive information via a direct request, related to yoics.net URLs, stream.m3u8 URIs, and cam_service_enable.cgi.
Published 2017-04-10 · Modified
7.5EPSS 0.015
CVE-2015-2883
Philips In.Sight B120/37 has XSS, related to the Weaved cloud web service, as demonstrated by the name parameter to deviceSettings.php or shareDevice.php.
Published 2017-04-10 · Modified
5.4EPSS 0.005