EUVD-2017-5181

Malware in sbrugna...

EUVD-2017-5180

Malware in sbrugna...

EUVD-2017-16705

Malware in sbrugna...

EUVD-2018-8076

Malware in sbrugna...

EUVD-2017-16703

Malware in sbrugna...

EUVD-2018-8074

Malware in sbrugna...

EUVD-2017-16701

Malware in sbrugna...

EUVD-2017-16704

Malware in sbrugna...

CVE-2018-16224

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...

CVE-2018-16222

Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application through 2.0.8 for Android allows an attacker to retrieve the username and password...

Default credentials

Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application through 2.0.8 for Android allows an attacker to retrieve the username and password...

CVE-2018-16222

Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application through 2.0.8 for Android allows an attacker to retrieve the username and password...

Improper access control

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...

CVE-2018-16224

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...

CVE-2018-16222

Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application through 2.0.8 for Android allows an attacker to retrieve the username and password...

CVE-2018-16222

The CVE-2018-16222 entry affects the iSmartAlarm Android app (up to version 2.0.8). The issue is cleartext storage of credentials in the iSmartAlarmData.xml configuration file, which can allow an attacker to retrieve the username and password. The connected documents confirm affected product comp...

CVE-2018-16224

CVE-2018-16224 describes an information-disclosure issue in the iSmartAlarm Cube One where incomplete access control on diagnostic files allows a remote attacker to retrieve sensitive data by sending crafted TCP requests to ports 12345 and 22306 (vulnerable through 2.2.4.10). The vulnerability is...

CVE-2018-16224

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...

iSmartAlarm Cube One Information Disclosure Vulnerability

The iSmartAlarm Cube One is a smart home center control device from iSmartAlarm USA. An information disclosure vulnerability exists in the diagnostic file in iSmartAlarm Cube One 2.2.4.10 and earlier versions, which stems from the program's failure to perform proper access control, and can be...

Denial of Service in iSmartAlarm(CVE-2017-7728)

Vendor: iSmartAlarm, inc. Product: iSmartAlarm cube - All iSmartAlarm is one of the leading IoT manufactures in the domain of smart alarm systems. It provides a fully integrated alarm system with siren, smart cameras and locks. It functions like any alarm system, but with the benefits of a...