Vendorswi2besmart_hp_wmtr1.2.20_201400922
Vulnerabilities

wi2be Technologies SMART HP WMT R1.2.20 201400922 r1.2.20_201400922

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2018-14078
Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL (Attackers can login using the "admin" username with password "admin" after a successful attack).
Published 2018-08-20 · Modified
10.0EPSS 0.022
CVE-2018-14079
Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to obtain sensitive information via /Status/SystemStatusRpm.esp.
Published 2018-08-20 · Modified
7.5EPSS 0.014
CVE-2018-14077
Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg.
Published 2018-08-20 · Modified
7.5EPSS 0.014