Skip to content
OpenAdvisories

Vendor

Heatmiser

4 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    Heatmiser Wifi Thermostat 1.7 Credential Disclosure via networkSetup.htm

    Heatmiser Wifi Thermostat 1.7 contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve administrative credentials by accessing the networkSetup.htm page. Attackers can request the networkSetup.htm endpoint and extract p…

  • High 7.5

    Heatmiser Netmonitor 3.03 - Hardcoded Credentials

    Heatmiser Netmonitor 3.03 contains a hardcoded credentials vulnerability in the networkSetup.htm page with predictable admin login credentials. Attackers can access the device by using the hard-coded username 'admin' and password 'admin' in the hidden form in…