What’s Vulnerable › Vulnerabilities

CVE-2018-10544

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-05-02 · updated 2026-06-17
• Weakness: CWE-287

Description

Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface.

Affected products

• Meross Mss110 Firmware: through 1.1.24

References

• https://garrettmiller.github.io/meross-mss110-vuln/
• https://garrettmiller.github.io/meross-mss110-vuln/

Get alerted when CVE-2018-10544 or the next vulnerability affects your stack