CVE-2014-9575: VDG Security SENSE (formerly DIVA) before 2.3.15 allows remote attackers to bypass authentication, and cons...

Security readout for executives and security teams

VDG Security SENSE, formerly DIVA, before 2.3.15 could let a remote attacker bypass authentication using a malformed Authorization header. Successful abuse could expose or change plugin settings, creating operational and security risk for organizations still running this legacy video/security management software. Exposure is limited to organizations running VDG Security SENSE or DIVA versions earlier than 2.3.15, especially where the web interface is reachable from untrusted networks. Prioritize remediation if this product is present and network-accessible. The issue affects authentication and administrative configuration integrity, but evidence of active exploitation is not provided in the sources. Mitigation focus: Identify any VDG Security SENSE or DIVA installations and confirm exact versions.; Upgrade affected systems to 2.3.15 or later, preferably a currently supported vendor release.; Restrict management interface access to trusted administrative networks or VPNs..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.