Ismartalarm Cubeone
7 CVEs affecting Ismartalarm Cubeone. Latest disclosed: 2018-11-20. Critical: 2, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-13664 | Critical | 9.8 | 2017-12-01 | Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to execute arbitrary commands with administrative privil… |
CVE-2017-7728 | Critical | 9.8 | 2017-07-11 | On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., setting the alarm on/off), related to incorrect cryp… |
CVE-2017-13663 | High | 7.5 | 2017-12-01 | Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an exposed key. |
CVE-2017-7730 | High | 7.5 | 2017-07-11 | iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the "cube" and it will stop responding. |
CVE-2017-7729 | High | 7.5 | 2017-07-11 | On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartext. |
CVE-2017-7726 | High | 7.5 | 2017-07-11 | iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability. |
CVE-2018-16224 | Medium | 5.3 | 2018-11-20 | Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted T… |