EUVD-2017-5181

Malware in sbrugna...

EUVD-2017-16703

Malware in sbrugna...

EUVD-2018-8074

Malware in sbrugna...

EUVD-2018-8076

Malware in sbrugna...

EUVD-2017-16704

Malware in sbrugna...

EUVD-2017-16705

Malware in sbrugna...

EUVD-2017-16701

Malware in sbrugna...

EUVD-2017-5180

Malware in sbrugna...

CVE-2018-16222

Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application through 2.0.8 for Android allows an attacker to retrieve the username and password...

CVE-2018-16224

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...

Default credentials

Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application through 2.0.8 for Android allows an attacker to retrieve the username and password...

CVE-2018-16222

Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application through 2.0.8 for Android allows an attacker to retrieve the username and password...

Improper access control

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...

CVE-2018-16224

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...

CVE-2018-16222

Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application through 2.0.8 for Android allows an attacker to retrieve the username and password...

CVE-2018-16222

The CVE-2018-16222 entry affects the iSmartAlarm Android app (up to version 2.0.8). The issue is cleartext storage of credentials in the iSmartAlarmData.xml configuration file, which can allow an attacker to retrieve the username and password. The connected documents confirm affected product comp...

CVE-2018-16224

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...

CVE-2018-16224

CVE-2018-16224 describes an information-disclosure issue in the iSmartAlarm Cube One where incomplete access control on diagnostic files allows a remote attacker to retrieve sensitive data by sending crafted TCP requests to ports 12345 and 22306 (vulnerable through 2.2.4.10). The vulnerability is...

CVE-2018-16224: Exposure of Sensitive Information to an Unauthorized Actor

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device...

CVE-2018-16222: Insufficiently Protected Credentials

Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application through 2.0.8 for Android allows an attacker to retrieve the username and password...