EUVD-2018-6001

Malware in sbrugna...

CVE-2018-14078

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL Attackers can login using the "admin" username with password "admin" after a successful attack...

CVE-2018-14079

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to obtain sensitive information via /Status/SystemStatusRpm.esp...

CVE-2018-14079

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to obtain sensitive information via /Status/SystemStatusRpm.esp...

CVE-2018-14078

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL Attackers can login using the "admin" username with password "admin" after a successful attack...

CVE-2018-14077

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg...

Design/Logic Flaw

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg...

Default credentials

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL Attackers can login using the "admin" username with password "admin" after a successful attack...

CVE-2018-14077

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg...

CVE-2018-14079

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to obtain sensitive information via /Status/SystemStatusRpm.esp...

CVE-2018-14079

Wi2be SMART HP WMT R1.2.20_201400922 contains a vulnerability that allows unauthorized remote attackers to obtain sensitive information via the /Status/SystemStatusRpm.esp endpoint. The CVE-2018-14079 entry notes information disclosure with network access and no authentication (CVSS2 base 5.0, CV...

PT-2018-12325

Name of the Vulnerable Software and Affected Versions Wi2be SMART HP WMT version 1.2.20 201400922 Description The issue allows unauthorized remote attackers to backup the device configuration. This is achieved by sending a direct request to the "/Maintenance/configfile.cfg" API endpoint...

CVE-2018-14077: Undefined Security Weakness

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg...

PT-2018-12327

Name of the Vulnerable Software and Affected Versions Wi2be SMART HP WMT version 1.2.20 201400922 Description The issue allows unauthorized remote attackers to obtain sensitive information. This is achieved via the "Status/SystemStatusRpm.esp" API endpoint. Recommendations For version 1.2.20...

PT-2018-12326

Name of the Vulnerable Software and Affected Versions Wi2be SMART HP WMT version 1.2.20 201400922 Description The issue allows unauthorized remote attackers to reset the admin password via the "ConfigWizard/ChangePwd.esp?2admin" API endpoint. After a successful attack, attackers can login using t...

CVE-2018-14078: Improper Authentication

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL Attackers can login using the "admin" username with password "admin" after a successful attack...

CVE-2018-14079: Exposure of Sensitive Information to an Unauthorized Actor

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to obtain sensitive information via /Status/SystemStatusRpm.esp...