Unscored CVE-2015-2883 EUVD-2015-2971GHSA-v2fr-3phg-j4cr

Philips In.Sight B120/37 has XSS, related to the Weaved cloud web service, as demonstrated by the name parameter to deviceSettings.php or s…

Published Apr 10, 2017 · Updated Aug 6, 2024 · Assigned by certcc

Description

Philips In.Sight B120/37 has XSS, related to the Weaved cloud web service, as demonstrated by the name parameter to deviceSettings.php or shareDevice.php.

Affected products

Vendor	Product	Affected	Fixed
—	Philips In.Sight B120/37	Philips In.Sight B120/37	—

References

https://community.rapid7.com/community/infosec/blog/2015/09/02/iotsec-disclosure-10-new-vulns-for-several-video-baby-monitors