Default credentials

2018-11-2019:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.0%

JSON

Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application through 2.0.8 for Android allows an attacker to retrieve the username and password.

CPENameOperatorVersion
ismartalarmle2.0.8

CPE	Name	Operator	Version
	ismartalarm	le	2.0.8

References

packetstormsecurity.com/files/150165/QBee-Camera-iSmartAlarm-Credential-Disclosure.html

seclists.org/fulldisclosure/2018/Nov/2