CVE-2018-14078

Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL (Attackers can login using the "admin" username with password "admin" after a successful attack).

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-08-20

Last modified

2024-08-05

Weaknesses

CWE-287

Affected products

• Smart Hp Wmt (Wi2be)

References

• https://vulncode.com/advisory/CVE-2018-14078