ismartalarm cubeone firmware vulnerabilities and exploits

(subscribe to this query)

On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., setting the alarm on/off), related to incorrect cryptography.

Ismartalarm Cubeone Firmware -

iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability.

Ismartalarm Cubeone Firmware -

On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartext.

Ismartalarm Cubeone Firmware -

iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the "cube" and it will stop responding.

Ismartalarm Cubeone Firmware -

Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and previous versions allows malicious users to execute arbitrary commands with administrative privileges by retrieving credentials from this file.

Ismartalarm Cubeone Firmware

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One up to and including 2.2.4.10 allows an malicious user to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device.

Ismartalarm Cubeone Firmware

1 Github repository

Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and previous versions allows malicious users to decrypt log files via an exposed key.

Ismartalarm Cubeone Firmware

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook