Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL (Attackers can login using the "admin" username with password "admin" after a successful attack).
References
Link | Resource |
---|---|
https://vulncode.com/advisory/CVE-2018-14078 | Third Party Advisory |
Configurations
Information
Published : 2018-08-20 13:29
Updated : 2019-10-02 17:03
NVD link : CVE-2018-14078
Mitre link : CVE-2018-14078
JSON object : View
CWE
CWE-287
Improper Authentication
Products Affected
wi2be
- smart_hp_wmt