Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2019-25322

Heatmiser Netmonitor 3.03 - Hardcoded Credentials

Description

Heatmiser Netmonitor 3.03 contains a hardcoded credentials vulnerability in the networkSetup.htm page with predictable admin login credentials. Attackers can access the device by using the hard-coded username 'admin' and password 'admin' in the hidden form input fields.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Heatmiser Heatmiser Netmonitor

  • 3.03affected

References