CVE-2019-25322: Heatmiser Netmonitor

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Heatmiser Netmonitor 3.03 contains a hardcoded credentials vulnerability in the networkSetup.htm page with predictable admin login credentials. Attackers can access the device by using the hard-coded username 'admin' and password 'admin' in the hidden form input fields.

Affected products

• Heatmiser Heatmiser Netmonitor: version 3.03 only

Published 2026-02-12. Last modified 2026-06-17.