Description
Heatmiser Netmonitor 3.03 contains a hardcoded credentials vulnerability in the networkSetup.htm page with predictable admin login credentials. Attackers can access the device by using the hard-coded username 'admin' and password 'admin' in the hidden form input fields.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Heatmiser | Heatmiser Netmonitor | 3.03 | — |
References
- ExploitDB-47823 exploit
- Archived Heatmiser Official Website product
- Netmonitor User Manual product
- VulnCheck Advisory: Heatmiser Netmonitor 3.03 - Hardcoded Credentials third-party-advisory