Heatmiser Heatmiser Netmonitor vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Heatmiser Heatmiser Netmonitor: 2 record(s), with affected versions and fixes.

CVE-2019-25323 Medium · 6.1 CWE-79 Feb 12, 2026

Heatmiser Netmonitor 3.03 - HTML Injection

Heatmiser Netmonitor v3.03 contains an HTML injection vulnerability in the outputSetup.htm page that allows attackers to inject malicious HTML code through the outputtitle parameter. Attackers can craft specially formatted POST requests to the outputtitle parameter to execute arbitrary HTML and potentially manipulate the web interface's displayed content.

CVE-2019-25322 High · 7.5 CWE-798 Feb 12, 2026

Heatmiser Netmonitor 3.03 - Hardcoded Credentials

Heatmiser Netmonitor 3.03 contains a hardcoded credentials vulnerability in the networkSetup.htm page with predictable admin login credentials. Attackers can access the device by using the hard-coded username 'admin' and password 'admin' in the hidden form input fields.