Ismartalarm
Ismartalarm Cubeone Firmware: vulnerabilidades y CVE
Ismartalarm Cubeone Firmware tiene 7 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE7
Últimos 12 meses0
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2018-16224 | Media (5.3) | 6.6% | — | 20 nov 2018 | Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive… |
| CVE-2017-13664 | Crítica (9.8) | 1.5% | — | 1 dic 2017 | Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to execute arbitrary commands with administrative privileges by retrieving credentials from this file. |
| CVE-2017-13663 | Alta (7.5) | 0.44% | — | 1 dic 2017 | Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an exposed key. |
| CVE-2017-7730 | Alta (7.5) | 1.3% | — | 11 jul 2017 | iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the "cube" and it will stop responding. |
| CVE-2017-7729 | Alta (7.5) | 0.69% | — | 11 jul 2017 | On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartext. |
| CVE-2017-7728 | Crítica (9.8) | 3.5% | — | 11 jul 2017 | On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., setting the alarm on/off), related to incorrect cryptography. |
| CVE-2017-7726 | Alta (7.5) | 0.73% | — | 11 jul 2017 | iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability. |