What’s Vulnerable › Vulnerabilities

CVE-2018-6401

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-05-02 · updated 2026-06-17
• Weakness: CWE-798

Description

Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password.

Affected products

• Meross Mss110 Firmware: through 1.1.24

References

• https://garrettmiller.github.io/meross-mss110-vuln/
• https://garrettmiller.github.io/meross-mss110-vuln/

Get alerted when CVE-2018-6401 or the next vulnerability affects your stack