CVE-2015-2860
Avigilon
- Published
- 23 June 2015
- Last modified
- 17 June 2026
- CVSS
- 7.8 v2.0
- Severity
- high
- EPSS
- 2.7% (85th pct)
- CISA KEV
- Not listed
- NVD status
- Modified
- Weaknesses
- CWE-22
AV:N/AC:L/Au:N/C:C/I:N/A:N
Description
Directory traversal vulnerability in Avigilon Control Center (ACC) 4 before 4.12.0.54 and 5 before 5.4.2.22 allows remote attackers to read arbitrary files via a crafted help/ URL.
Exploitation
Not listed in the CISA Known Exploited Vulnerabilities catalogue as of 2026.09.04. That is an absence of confirmed public exploitation, not evidence that exploitation has not occurred. EPSS models a 2.7% probability of exploitation activity in the next 30 days.
Affected products
| Product | Vendor | Type | Versions named |
|---|---|---|---|
| Avigilon Control Center | Avigilon | unknown | <= 4.12.0.53, <= 5.4.2.21 |
References
- http://www.kb.cert.org/vuls/id/555984 third-party
- http://www.securityfocus.com/bid/75115
- http://www.kb.cert.org/vuls/id/555984 third-party
- http://www.securityfocus.com/bid/75115
Record assembled from NVD, CISA KEV 2026.09.04 and FIRST EPSS 2026-09-04. Affected products are those NVD's CPE configuration names that fall inside this site's scope; a CVE may affect products outside it.