CVE-2018-7111

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-10-17 · updated 2026-06-17

Description

A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a malfunction identified in some section of the DSM portal and some DSM APIs. The impact of the malfunction is that the info can be changed by other users.

Affected products

HP Universal Internet Of Things: 1.2.4.2, 1.4.0, 1.4.1, 1.4.2, 1.5

References

http://www.securityfocus.com/bid/105704
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03891en_us
https://exchange.xforce.ibmcloud.com/vulnerabilities/151691
http://www.securityfocus.com/bid/105704
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03891en_us

Get alerted when CVE-2018-7111 or the next vulnerability affects your stack