CVE-2019-25322

HIGH

Heatmiser Netmonitor 3.03 - Hardcoded Credentials

Title source: llm

Description

Heatmiser Netmonitor 3.03 contains a hardcoded credentials vulnerability in the networkSetup.htm page with predictable admin login credentials. Attackers can access the device by using the hard-coded username 'admin' and password 'admin' in the hidden form input fields.

Exploits (1)

exploitdb WRITEUP

by Ismail Tasdelen · textwebappshardware

https://www.exploit-db.com/exploits/47823

View Code ZIP pw:eip

References (4)

[Various Sources] https://web.archive.org/web/20190724160628/https://www.heatmiser.com/en/

[Various Sources] https://www.zoneregeling.nl/heatmiser/netmonitor-handleiding.pdf

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/47823

[Third Party Advisory] https://www.vulncheck.com/advisories/heatmiser-netmonitor-hardcoded-credentials

Scores

CVSS v3 7.5

EPSS 0.0004

EPSS Percentile 12.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-798

Status draft

Timeline

Published Feb 12, 2026

Tracked Since Feb 18, 2026