CVE-2018-14078

The CVE-2018-14078 entry affects Wi2be SMART HP WMT R1.2.20_201400922. The vulnerability allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL, enabling login with username “admin” and password “admin” after a successful attack. CVSS detai...

CVE-2018-14079

Wi2be SMART HP WMT R1.2.20_201400922 contains a vulnerability that allows unauthorized remote attackers to obtain sensitive information via the /Status/SystemStatusRpm.esp endpoint. The CVE-2018-14079 entry notes information disclosure with network access and no authentication (CVSS2 base 5.0, CV...

CVE-2018-14077

The CVE-2018-14077 entry concerns the Wi2be SMART HP WMT R1.2.20_201400922. Affected component is the device management interface; vulnerability arises from an unauthorized direct request to /Maintenance/configfile.cfg that allows backing up the device configuration. The connected documents confi...