ByteOS Network

CVE Vulnerability Details :

CVE-2019-25322

PUBLISHED

More Info Official Page

Assigner-VulnCheck

Assigner Org ID-83251b91-4cc7-4094-a5c7-464a1b83ea10

Published At-12 Feb, 2026 | 22:48

Updated At-12 Feb, 2026 | 22:48

▼CVE Numbering Authority (CNA)

Heatmiser Netmonitor 3.03 - Hardcoded Credentials

Heatmiser Netmonitor 3.03 contains a hardcoded credentials vulnerability in the networkSetup.htm page with predictable admin login credentials. Attackers can access the device by using the hard-coded username 'admin' and password 'admin' in the hidden form input fields.

Affected Products

Vendor

Heatmiser

Product

Heatmiser Netmonitor

Versions

Affected

3.03

Problem Types

Type	CWE ID	Description
CWE	CWE-798	Use of Hard-coded Credentials

Type: CWE

CWE ID: CWE-798

Description: Use of Hard-coded Credentials

Metrics

Version	Base score	Base severity	Vector
4.0	9.3	CRITICAL	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Version: 4.0

Base score: 9.3

Base severity: CRITICAL

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Credits

finder

Ismail Tasdelen

References

Hyperlink	Resource
https://www.exploit-db.com/exploits/47823	exploit
https://web.archive.org/web/20190724160628/https://www.heatmiser.com/en/	product
https://www.zoneregeling.nl/heatmiser/netmonitor-handleiding.pdf	product
https://www.vulncheck.com/advisories/heatmiser-netmonitor-hardcoded-credentials	third-party-advisory

Hyperlink: https://www.exploit-db.com/exploits/47823

Resource:

exploit

Hyperlink: https://web.archive.org/web/20190724160628/https://www.heatmiser.com/en/

Resource:

product

Hyperlink: https://www.zoneregeling.nl/heatmiser/netmonitor-handleiding.pdf

Resource:

product

Hyperlink: https://www.vulncheck.com/advisories/heatmiser-netmonitor-hardcoded-credentials

Resource:

third-party-advisory

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References