Ismartalarm
6 CVEs across 3 Ismartalarm products. Browse Ismartalarm vulnerabilities, severities, and proof-of-concept exploits.
Ismartalarm products with known CVEs
Ismartalarm CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2018-16224 | Medium | 5.3 | 2018-11-20 | Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted T… |
CVE-2018-16222 | Medium | 6.8 | 2018-11-20 | Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application through 2.0.8 for Android allows an attacker to r… |
CVE-2017-13664 | Critical | 9.8 | 2017-12-01 | Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to execute arbitrary commands with administrative privil… |
CVE-2017-13663 | High | 7.5 | 2017-12-01 | Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an exposed key. |
CVE-2017-7730 | High | 7.5 | 2017-07-11 | iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the "cube" and it will stop responding. |
CVE-2017-7729 | High | 7.5 | 2017-07-11 | On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartext. |
CVE-2017-7728 | Critical | 9.8 | 2017-07-11 | On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., setting the alarm on/off), related to incorrect cryp… |
CVE-2017-7726 | High | 7.5 | 2017-07-11 | iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability. |