CVE-2017-13664

Critical

Published: 01/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Version 2.2.4.8 and earlier of iSmartAlarm CubeOne firmware has a vulnerability that allows password file exposure. Attackers can retrieve credentials from this file, enabling them to execute arbitrary commands with administrative privileges.

Risk Assessment

The exposure of the password file poses a significant security risk, allowing attackers full control over the device. This could lead to further attacks on the organization's network.

Recommendation

It is recommended to update the iSmartAlarm CubeOne firmware to the latest version to mitigate this vulnerability. Additionally, monitor system access and change passwords to minimize risk.

Original NVD description (English source)

Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to execute arbitrary commands with administrative privileges by retrieving credentials from this file.