Heatmiser Netmonitor
Approved changes feed: RSS · Atom
cpe:2.3:a:heatmiser:heatmiser_netmonitor:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Heatmiser (eb1808d6-166f-554f-8887-67ef5b9b3607) |
|---|---|
| Product | Heatmiser Netmonitor (febb461a-21a5-50bb-a72d-1886f1665232) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-25323 |
vulnerable | 2026-06-08 05:13:42.236540 |
Heatmiser Netmonitor 3.03 - HTML Injection
MEDIUM (6.1)
Heatmiser Netmonitor v3.03 contains an HTML injection vulnerability in the outputSetup.htm page that allows attackers to inject malicious HTML code through the outputtitle parameter. Attackers can craft specially formatted POST requests to the outputtitle parameter to execute arbitrary HTML and potentially manipulate the web interface's displayed content.
Published: 2026-02-12T22:48:35.906Z
Updated: 2026-02-13T17:13:42.949Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25322 |
vulnerable | 2026-06-08 05:13:42.236092 |
Heatmiser Netmonitor 3.03 - Hardcoded Credentials
HIGH (7.5)
Heatmiser Netmonitor 3.03 contains a hardcoded credentials vulnerability in the networkSetup.htm page with predictable admin login credentials. Attackers can access the device by using the hard-coded username 'admin' and password 'admin' in the hidden form input fields.
Published: 2026-02-12T22:48:35.204Z
Updated: 2026-02-13T17:13:06.426Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.