CVE-2017-7728

The CVE-2017-7728 entry concerns iSmartAlarm cube devices, where an Authentication Bypass allows remote execution of alarm controls. The connected material confirms: (a) vulnerability type is Authentication Bypass leading to remote command execution (e.g., Arm/Disarm, Siren control); (b) root cau...

CVE-2017-7730

The CVE-2017-7730 issue affects iSmartAlarm cube devices and describes a Denial of Service caused by a SYN flood to TCP port 12345, which can freeze the cube and render it unresponsive. Public details indicate an internal LAN attack vector (no user interaction required) with a low attack complexi...

CVE-2017-7728

On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands e.g., setting the alarm on/off, related to incorrect cryptography...

CVE-2017-7726

iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability...

CVE-2017-7728: Undefined Security Weakness

On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands e.g., setting the alarm on/off, related to incorrect cryptography...

CVE-2017-7729: Missing Encryption of Sensitive Data

On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartext...

CVE-2017-7726: Improper Certificate Validation

iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability...

CVE-2017-7730: Improper Input Validation

iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the "cube" and it will stop responding...

iSmartAlarm - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application iSmartAlarm published at the 'play' market has multiple vulnerabilities...