48 matches found
Design/Logic Flaw
Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface...
Default credentials
Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password...
CVE-2018-6401
Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password...
CVE-2018-10544
Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface...
CVE-2018-6401
Meross MSS110 devices prior to version 1.1.24 expose a TELNET listener that grants access for an undocumented admin account with a blank password. The issue, consistently described across NVD, CNVD, and CVE records, is due to the TELNET service remaining active with empty credentials. Public deta...
CVE-2018-10544
Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface...
CVE-2018-10544
CVE-2018-10544 affects Meross MSS110 devices, up to firmware version 1.1.24, which expose an unauthenticated administrative web interface (admin.htm). The connected CNVD/NVD entries confirm a straightforward unauthenticated access path to manage interfaces, with the CNVD noting the risk of inform...