EIP-2026-102114

This exploit demonstrates an unauthenticated password reset vulnerability in the WDTV Live SMP web interface via a crafted GET request to 'modfiy_pw.php'. It allows an attacker to set a new password and gain administrative access to the device.