Thermostat (Redhat) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2026-05-29. Vendor: Redhat.

CVEs of Thermostat

• CVE-2018-25396 - CVSS 8.7 (high), 2026-05-29: Heatmiser Wifi Thermostat 1.7 contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve administrative credentials by…
• CVE-2019-25708 - CVSS 5.3 (medium), 2026-04-12: Heatmiser Wifi Thermostat 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials by tricking…
• CVE-2015-3201 - CVSS 2.1 (low), 2015-06-08: Thermostat before 2.0.0 uses world-readable permissions for the web.xml configuration file, which allows local users to obtain user credentials by reading the…