cve/2018/CVE-2018-9162.md

CVE-2018-9162

Description

Contec Smart Home 4.15 devices do not require authentication for new_user.php, edit_user.php, delete_user.php, and user.php, as demonstrated by changing the admin password and then obtaining control over doors.

POC

Reference

• https://www.exploit-db.com/exploits/44295/
• https://www.exploit-db.com/exploits/44295/

Github

No PoCs found on GitHub currently.