CVE-2018-25396
Heatmiser Wifi Thermostat 1.7 Credential Disclosure via networkSetup.htm
- State
- Published
- Severity
- 8.7 High
- Published
- May 29, 2026
- Updated
- Jul 28, 2026
- Reserved
- May 29, 2026
Description
Heatmiser Wifi Thermostat 1.7 contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve administrative credentials by accessing the networkSetup.htm page. Attackers can request the networkSetup.htm endpoint and extract plaintext username and password values from HTML form fields to gain administrative access to the thermostat.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | VulnCheck |
Weaknesses
- CWE-256 Plaintext Storage of a Password
Affected Products
| Product | Versions |
|---|---|
Heatmiser Wifi ThermostatHeatmiser |
|
References
- ExploitDB-45623exploit
- VulnCheck Advisory: Heatmiser Wifi Thermostat 1.7 Credential Disclosure via networkSetup.htmthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.