CVE-2018-7111
Medium
Description
A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a malfunction identified in some section of the DSM portal and some DSM APIs. The impact of the malfunction is that the info can be changed by other users.
SeverityMedium
CVSS5.3
Exploit probability—
ProductHp Universal Internet Of Things
PublishedOct 17, 2018
First seenOct 17, 2018
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hp universal_internet_of_things | 1.2.4.2, 1.4.0, 1.4.1, 1.4.2, 1.5 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.