EUVD-2014-3281

Malware in sbrugna...

CVE-2017-7729

CVE-2017-7729 concerns iSmartAlarm cube devices, where an incorrect access control vulnerability arises because a newly created key is transmitted in cleartext. The issue is documented with a network-attack surface and low attack complexity, resulting in a high impact on integrity (partial) per C...

CVE-2017-7726

CVE-2017-7726 affects iSmartAlarm cube devices. The vulnerability is a missing SSL certificate validation in the cube’s TLS connections to the backend (port 8443), enabling potential integrity impact due to untrusted server validation. References in connected records describe the SSL-validation w...

CVE-2017-7730

The CVE-2017-7730 issue affects iSmartAlarm cube devices and describes a Denial of Service caused by a SYN flood to TCP port 12345, which can freeze the cube and render it unresponsive. Public details indicate an internal LAN attack vector (no user interaction required) with a low attack complexi...

CVE-2016-1141

KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors...