PT-2018-17535

CVE-2018-6401

Published

2018-05-02

Updated

2018-06-13

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Meross MSS110 devices versions prior to 1.1.24

Description The issue concerns an undocumented admin account with a blank password, accessible through a TELNET listener.

Recommendations For Meross MSS110 devices versions prior to 1.1.24, update to version 1.1.24 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾