Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2811▼ 173 respecto a la semana anterior
Críticas / altas1356▲ 48 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)267▼ 256 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.3) | 6.6% | — | Ismartalarm Cubeone Firmware | 20/11/2018 | 17/6/2026 | Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device. | |
| Modificada | Crítica (9.8) | 1.5% | — | Ismartalarm Cubeone Firmware | 1/12/2017 | 17/6/2026 | Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to execute arbitrary commands with administrative privileges by retrieving credentials from this file. | |
| Modificada | Alta (7.5) | 0.44% | — | Ismartalarm Cubeone Firmware | 1/12/2017 | 17/6/2026 | Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an exposed key. | |
| Modificada | Alta (7.5) | 1.3% | — | Ismartalarm Cubeone Firmware | 11/7/2017 | 17/6/2026 | iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the "cube" and it will stop responding. | |
| Modificada | Alta (7.5) | 0.69% | — | Ismartalarm Cubeone Firmware | 11/7/2017 | 17/6/2026 | On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartext. | |
| Modificada | Crítica (9.8) | 3.5% | — | Ismartalarm Cubeone Firmware | 11/7/2017 | 17/6/2026 | On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., setting the alarm on/off), related to incorrect cryptography. | |
| Modificada | Alta (7.5) | 0.73% | — | Ismartalarm Cubeone Firmware | 11/7/2017 | 17/6/2026 | iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability. |