CVE-2017-7726
HighSummary
iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability.
Risk Assessment
An attacker could exploit this vulnerability to intercept data transmitted between the device and the server, potentially compromising user privacy.
Recommendation
It is recommended to update the device firmware and implement additional security measures to secure communication.
Other vulnerabilities in iSmartAlarm cube devices
See all- CVE-2017-7730High
iSmartAlarm cube devices are vulnerable to Denial of Service attacks. Sending a SYN flood on port 12345 causes the 'cube' to freeze and stop responding.
- CVE-2017-7729High
On iSmartAlarm cube devices, there is incorrect access control because a 'new key' is transmitted in cleartext.
- CVE-2017-7728Critical
On iSmartAlarm cube devices, there is an authentication bypass leading to remote execution of commands, such as setting the alarm on/off, related to incorrect cryptography.
Original NVD description (English source)
iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability.