CVE-2018-7111: HP Universal Internet Of Things

Medium severity, CVSS 5.3. EPSS: 5.3% chance of exploitation in the next 30 days.

A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a malfunction identified in some section of the DSM portal and some DSM APIs. The impact of the malfunction is that the info can be changed by other users.

Affected products

• HP Universal Internet Of Things: version 1.2.4.2 only; version 1.4.0 only; version 1.4.1 only; version 1.4.2 only; version 1.5 only

Published 2018-10-17. Last modified 2026-06-17.