https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-14079.htmlhttps://patchthecve.com/cve/CVE-2018-14079.htmlWed, 17 Jun 2026 01:40:36 +0000HIGH 7.5: Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to obtain sensitive information via /Status/SystemStatusRpm.esp.https://patchthecve.com/cve/CVE-2018-14078.htmlhttps://patchthecve.com/cve/CVE-2018-14078.htmlWed, 17 Jun 2026 01:40:36 +0000CRITICAL 9.8: Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL (Attackers can login using the "admin" username with password "admin" after a successful attack).https://patchthecve.com/cve/CVE-2018-14077.htmlhttps://patchthecve.com/cve/CVE-2018-14077.htmlWed, 17 Jun 2026 01:40:36 +0000HIGH 7.5: Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg.