Unscored CVE-2018-14078 EUVD-2018-6000GHSA-xr46-9c78-g7pg

Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2…

Published Aug 20, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL (Attackers can login using the "admin" username with password "admin" after a successful attack).

References

https://vulncode.com/advisory/CVE-2018-14078