CVE-2018-9162

2022-10-0316:21:58

mitre

www.cve.org

contec smart home

authentication

bypass

9.9 High

AI Score

Confidence

High

0.385 Low

EPSS

Percentile

97.3%

JSON

Contec Smart Home 4.15 devices do not require authentication for new_user.php, edit_user.php, delete_user.php, and user.php, as demonstrated by changing the admin password and then obtaining control over doors.

References

www.exploit-db.com/exploits/44295/