CVE-2018-25396
HIGHHeatmiser Wifi Thermostat 1.7 Credential Disclosure via networkSetup.htm
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25396. PoCs published by d0wnp0ur.
AI-analyzed exploit summary This script exploits an information disclosure vulnerability in Heatmiser Wifi Thermostat 1.7 by fetching the 'networkSetup.htm' page, which contains plaintext credentials. It parses the HTML to extract the username and password.
Description
Heatmiser Wifi Thermostat 1.7 contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve administrative credentials by accessing the networkSetup.htm page. Attackers can request the networkSetup.htm endpoint and extract plaintext username and password values from HTML form fields to gain administrative access to the thermostat.
Exploits (1)
This script exploits an information disclosure vulnerability in Heatmiser Wifi Thermostat 1.7 by fetching the 'networkSetup.htm' page, which contains plaintext credentials. It parses the HTML to extract the username and password.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N