9 matches found
CVE-2018-14079
Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to obtain sensitive information via /Status/SystemStatusRpm.esp...
CVE-2018-14077
Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg...
CVE-2018-14078
Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL Attackers can login using the "admin" username with password "admin" after a successful attack...
CVE-2018-14077: Undefined Security Weakness
Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg...
CVE-2018-14078: Improper Authentication
Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL Attackers can login using the "admin" username with password "admin" after a successful attack...
PT-2018-12327
Name of the Vulnerable Software and Affected Versions Wi2be SMART HP WMT version 1.2.20 201400922 Description The issue allows unauthorized remote attackers to obtain sensitive information. This is achieved via the "Status/SystemStatusRpm.esp" API endpoint. Recommendations For version 1.2.20...
PT-2018-12326
Name of the Vulnerable Software and Affected Versions Wi2be SMART HP WMT version 1.2.20 201400922 Description The issue allows unauthorized remote attackers to reset the admin password via the "ConfigWizard/ChangePwd.esp?2admin" API endpoint. After a successful attack, attackers can login using t...
PT-2018-12325
Name of the Vulnerable Software and Affected Versions Wi2be SMART HP WMT version 1.2.20 201400922 Description The issue allows unauthorized remote attackers to backup the device configuration. This is achieved by sending a direct request to the "/Maintenance/configfile.cfg" API endpoint...
CVE-2018-14079: Exposure of Sensitive Information to an Unauthorized Actor
Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to obtain sensitive information via /Status/SystemStatusRpm.esp...