CVE-2018-14078

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL Attackers can login using the "admin" username with password "admin" after a successful attack...

CVE-2018-14078

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL Attackers can login using the "admin" username with password "admin" after a successful attack...

CVE-2018-14079

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to obtain sensitive information via /Status/SystemStatusRpm.esp...

CVE-2018-14077

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg...

Default credentials

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL Attackers can login using the "admin" username with password "admin" after a successful attack...

Design/Logic Flaw

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg...

CVE-2018-14077

The CVE-2018-14077 entry concerns the Wi2be SMART HP WMT R1.2.20_201400922. Affected component is the device management interface; vulnerability arises from an unauthorized direct request to /Maintenance/configfile.cfg that allows backing up the device configuration. The connected documents confi...

CVE-2018-14077

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg...

CVE-2018-14079

Wi2be SMART HP WMT R1.2.20_201400922 contains a vulnerability that allows unauthorized remote attackers to obtain sensitive information via the /Status/SystemStatusRpm.esp endpoint. The CVE-2018-14079 entry notes information disclosure with network access and no authentication (CVSS2 base 5.0, CV...

CVE-2018-14079

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to obtain sensitive information via /Status/SystemStatusRpm.esp...

CVE-2018-14078

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL Attackers can login using the "admin" username with password "admin" after a successful attack...

CVE-2018-14078

The CVE-2018-14078 entry affects Wi2be SMART HP WMT R1.2.20_201400922. The vulnerability allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL, enabling login with username “admin” and password “admin” after a successful attack. CVSS detai...

Zip Slip arbitrary file overwrite vulnerability analysis-vulnerability warning-the black bar safety net

Zip Slip is a widespread arbitrary file overwrite vulnerability, usually leads to remote command execution. The vulnerability affects range greatly: the 1. Affected products: Hewlett-Packard, Amazon, apache, Pivotal, etc.; 2. The affected programming languages: JavaScript, Python, Ruby,. NET, Go,...

The vulnerability of microprogrammed software in HP PageWide, DesignJet, AMP, Deskjet, Envy, Ink Tank, Officejet, Photosmart, and Smart Tank printers arises from an operation that goes beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of microprogrammed software on HP PageWide, DesignJet, AMP, Deskjet, Envy, Ink Tank, Officejet, Photosmart, and Smart Tank devices arises from operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code ...

HP Ink Printers RCE Vulnerabilities (Faxploit)

Two security vulnerabilities have been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack or static buffer overflow, which could allow remote code execution RCE. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might...

Podcast: Bugcrowd Founder on Printer Bugs, IoT Bounty Hunting, and New VDP Project

Bugcrowd has had a busy summer. Recently, the bug-bounty company partnered with HP to launch the first-ever bug bounty program for printers, with rewards of up to $10,000 for discovered vulnerabilities. Bugcrowd also recently announced Disclose.io, an open-sourced project to standardize best...

HPSBHF03590 rev. 2 - L1 Terminal Fault (L1TF)

Potential Security Impact Unauthorized exposure of privileged data from memory. Source: HP, HP Product Security Response Team PSRT, Intel Reported By: Intel VULNERABILITY SUMMARY A new speculative execution side channel variant has been discovered called L1 Terminal Fault L1TF. There are no repor...

Buffer overflow

A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a static buffer overflow, which could allow remote code execution...

CVE-2018-5924

A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack buffer overflow, which could allow remote code execution...

Stack overflow

A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack buffer overflow, which could allow remote code execution...