SerVision HVG – Hardcoded password

Posted by Richard Tafoya on Feb 10

Hello…

Over a year ago I disclosed several vulnerabilities in Servision HVG network video recording devices. CVE-2015-0929 and
CVE-2015-0930.
https://www.kb.cert.org/vuls/id/522460

Since it’s been a while now, and hardcoded backdoor passwords in “security” devices are the current hotness…

Hardcoded Backdoor Password: A hardcoded backdoor password has been discovered in SerVision HVG firmware below version
2.2.26a100.
An…