Unauthorized Remote Backup of Device Configuration in Wi2be SMART HP WMT R1.2.20_201400922

CVE-2018-14077 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg.

Learn more about our Web Application Penetration Testing UK.