Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Heatmiser Clear all filters
TI-2018-15621 CVE-2018-25396 · GHSA-g2j8-j26j-56qh

Heatmiser Wifi Thermostat 1.7 Credential Disclosure via networkSetup.htm

Priority HIGH 77

Heatmiser Wifi Thermostat 1.7 contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve administrative credentials by accessing the networkSetup.htm page.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00313 Published 2026-05-29 No fix listed CWE-256
TI-2019-15760 CVE-2019-25708 · GHSA-3g23-vj39-72pv

Heatmiser Wifi Thermostat 1.7 Cross-Site Request Forgery

Priority MEDIUM 57

Heatmiser Wifi Thermostat 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials by tricking authenticated users into submitting malicious requests.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00129 Published 2026-04-12 No fix listed CWE-352
TI-2019-15377 CVE-2019-25323 · GHSA-rxgx-jjvj-9w6v

Heatmiser Netmonitor 3.03 - HTML Injection

Priority MEDIUM 62

Heatmiser Netmonitor v3.03 contains an HTML injection vulnerability in the outputSetup.htm page that allows attackers to inject malicious HTML code through the outputtitle parameter.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00268 Published 2026-02-12 No fix listed CWE-79
TI-2019-15376 CVE-2019-25322 · GHSA-4mqf-r24p-f3vh

Heatmiser Netmonitor 3.03 - Hardcoded Credentials

Priority HIGH 79

Heatmiser Netmonitor 3.03 contains a hardcoded credentials vulnerability in the networkSetup.htm page with predictable admin login credentials.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00329 Published 2026-02-12 No fix listed CWE-798