CVE-2015-2909 — Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures login credentials, which makes it easier for remote attackers to obtain access by leveraging situations in which this warning was not heeded

Back Back to CVE browser

CRITICAL

Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures login credentials, which makes it easier for remote attackers to obtain access by leveraging situations in which this warning was not heeded

Published Feb 6, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.94%

Description

Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that the administrator configures login credentials, which makes it easier for remote attackers to obtain access by leveraging situations in which this warning was not heeded. NOTE: the vendor states "The user is presented with clear warnings on the GUI that they should set usernames and passwords."

Affected products

Vendor Dedicated Micros Product DS2 Default
n/a
- Version
  unknown
  Status
  affected
  Constraints
  -
Vendor Dedicated Micros Product DV-IP Express Default
n/a
- Version
  unknown
  Status
  affected
  Constraints
  -
Vendor Dedicated Micros Product EcoSense Default
n/a
- Version
  unknown
  Status
  affected
  Constraints
  -
Vendor Dedicated Micros Product SD Default
n/a
- Version
  unknown
  Status
  affected
  Constraints
  -
Vendor Dedicated Micros Product SD Advanced Default
n/a
- Version
  unknown
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dedicated Micros

DS2

n/a

Version	Status	Constraints
unknown	affected	-

Dedicated Micros

DV-IP Express

n/a

Version	Status	Constraints
unknown	affected	-

Dedicated Micros

EcoSense

n/a

Version	Status	Constraints
unknown	affected	-

Dedicated Micros

n/a

Version	Status	Constraints
unknown	affected	-

Dedicated Micros

SD Advanced

n/a

Version	Status	Constraints
unknown	affected	-

Remediation

No remediation recorded yet.

Metrics

2.94% 0.02941

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.02941

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (13 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	2.94% (0.02941)	86.64th	v5 (v2026.06.15)
Jun 15, 2026	2.94% (0.02941)	85.28th	v5 (v2026.06.15)
Mar 17, 2025	3.57% (0.03574)	86.94th	v4 (v2025.03.14)
Dec 17, 2024	2.11% (0.02106)	88.84th	v3 (v2023.03.01)
Dec 12, 2024	0.88% (0.00883)	83.23th	v3 (v2023.03.01)
May 17, 2024	0.72% (0.00720)	80.52th	v3 (v2023.03.01)
Jan 13, 2024	0.72% (0.00720)	78.51th	v3 (v2023.03.01)
Jun 11, 2023	0.57% (0.00569)	74.71th	v3 (v2023.03.01)
Mar 7, 2023	0.47% (0.00471)	71.81th	v3 (v2023.03.01)
Mar 6, 2023	1.05% (0.01055)	52.13th	v2 (v2022.01.01)
Sep 17, 2022	1.05% (0.01055)	50.47th	v2 (v2022.01.01)
Apr 1, 2022	1.05% (0.01055)	48.43th	v2 (v2022.01.01)
Feb 4, 2022	1.05% (0.01055)	27.52th	v2 (v2022.01.01)

Weaknesses (1)

CWE-269

Improper Privilege Management

References (2)

http://cybergibbons.com/security-2/shodan-searches/interesting-shodan-searches-sd-advanced-dvrs/
x_refsource_MISCExploitThird Party Advisory
http://www.kb.cert.org/vuls/id/276148
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://cybergibbons.com/security-2/shodan-searches/interesting-shodan-searches-sd-advanced-dvrs/		x_refsource_MISCExploitThird Party Advisory
http://www.kb.cert.org/vuls/id/276148		x_refsource_MISCThird Party AdvisoryUS Government Resource