PT-2018-12326

Name of the Vulnerable Software and Affected Versions Wi2be SMART HP WMT version 1.2.20 201400922 Description The issue allows unauthorized remote attackers to reset the admin password via the "ConfigWizard/ChangePwd.esp?2admin" API endpoint. After a successful attack, attackers can login using t...

CVE-2018-14078: Improper Authentication

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL Attackers can login using the "admin" username with password "admin" after a successful attack...