CVE Catalog
CVE-2017-7728
CriticalSummary
On iSmartAlarm cube devices, there is an authentication bypass leading to remote execution of commands, such as setting the alarm on/off, related to incorrect cryptography.
Risk Assessment
This vulnerability may lead to unauthorized access to the alarm system, posing a serious threat to the safety of property and individuals.
Recommendation
It is recommended to update the firmware of iSmartAlarm cube devices and implement additional security measures to mitigate the risk.
Original NVD description (English source)
On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., setting the alarm on/off), related to incorrect cryptography.