CVE-2018-16224

CVE-2018-16224 describes an information-disclosure issue in the iSmartAlarm Cube One where incomplete access control on diagnostic files allows a remote attacker to retrieve sensitive data by sending crafted TCP requests to ports 12345 and 22306 (vulnerable through 2.2.4.10). The vulnerability is...