EUVD-2017-16703

Malware in sbrugna...

EUVD-2018-8076

Malware in sbrugna...

CVE-2018-16224

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...

CVE-2018-16224

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...

CVE-2018-16224

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...

CVE-2018-16224: Exposure of Sensitive Information to an Unauthorized Actor

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...

PT-2018-13441

Name of the Vulnerable Software and Affected Versions iSmartAlarm Cube versions 2.2.4.10 and earlier Description The issue concerns incorrect access control for diagnostic files, allowing an attacker to retrieve sensitive information from the device by sending a specifically crafted TCP request t...

iSmartAlarm Cube One Information Disclosure Vulnerability

The iSmartAlarm Cube One is a smart home center control device from iSmartAlarm USA. An information disclosure vulnerability exists in the diagnostic file in iSmartAlarm Cube One 2.2.4.10 and earlier versions, which stems from the program's failure to perform proper access control, and can be...

iSmartAlarm cube Device Access Control Error Vulnerability

The iSmartAlarm cube devices are a smart home device from iSmartAlarm USA. An access control error vulnerability exists in the iSmartAlarm cube devices, where the vulnerable program passes a newly created key in plaintext. No details of the vulnerability are provided at this time...

iSmartAlarm cube Device Information Disclosure Vulnerability

The iSmartAlarm cube devices are a smart home device from iSmartAlarm USA. An information disclosure vulnerability exists in the iSmartAlarm cube devices. A remote attack could exploit this vulnerability to obtain arbitrary passwords or personal data...

iSmartAlarm cube device encryption issue vulnerability

The iSmartAlarm cube devices are a smart home device from iSmartAlarm USA. An authentication bypass vulnerability exists in iSmartAlarm cube devices. A remote attacker can exploit this vulnerability to execute commands...

iSmartAlarm cube device input validation vulnerability

The iSmartAlarm cube devices are a smart home device from iSmartAlarm USA. A denial of service vulnerability exists in iSmartAlarm cube devices. An attacker can exploit this vulnerability to cause a denial of service device stops responding...

Input validation

iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability...

CVE-2017-7728

On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands e.g., setting the alarm on/off, related to incorrect cryptography...

CVE-2017-7728: Undefined Security Weakness

On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands e.g., setting the alarm on/off, related to incorrect cryptography...

CVE-2017-7729: Missing Encryption of Sensitive Data

On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartext...

CVE-2017-7726: Improper Certificate Validation

iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability...

CVE-2017-7730: Improper Input Validation

iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the "cube" and it will stop responding...