Wi2be: >> Smart Hp Wmt Security Vulnerabilities
Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL (Attackers can login using the "admin" username with password "admin" after a successful attack).
CVSS Score
9.8
EPSS Score
0.015
Published
2018-08-20
Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to obtain sensitive information via /Status/SystemStatusRpm.esp.
CVSS Score
7.5
EPSS Score
0.003
Published
2018-08-20
Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg.
CVSS Score
7.5
EPSS Score
0.003
Published
2018-08-20