0x6 CVE-2018-14077
Discoverer
VULNC0D3 ( @herwonowr )
CVE ID
Description
Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to “/Maintenance/configfile.cfg”
Vulnerability Type
Unautorized Backup Config
Vendor of Product
Wi2be
– Vendor Homepage : http://www.wi2be.com
– Software Link : http://www.wi2be.com/site/produtos/smart-hp/
Affected Product Code Base
Smart HP - R1.2.20_201400922
Affected Component
Maintenance
Attack Type
Remote
Impact Information Disclosure
True
Attack Vectors
Remote
Timeline
– 2018-07-15 : Request CVE ID
– 2018-07-15 : CVE ID Assigned
– 2018-07-16 : Contacting Vendor
– 2018-08-16 : Vendor Not Responding
– 2018-08-16 : Request for Publication
– 2018-08-18 : CVE ID Public Release