PT-2018-12325

CVE-2018-14077

·

Published

2018-08-20

·

Updated

2020-08-24

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Wi2be SMART HP WMT version 1.2.20 201400922
Description The issue allows unauthorized remote attackers to backup the device configuration. This is achieved by sending a direct request to the "/Maintenance/configfile.cfg" API endpoint.
Recommendations For version 1.2.20 201400922, consider restricting access to the "/Maintenance/configfile.cfg" API endpoint to prevent unauthorized configuration backups until a patch is available.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2018-14077
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com