CVE-2017-7730
HighSummary
iSmartAlarm cube devices are vulnerable to Denial of Service attacks. Sending a SYN flood on port 12345 causes the 'cube' to freeze and stop responding.
Risk Assessment
An attacker can freeze the device, leading to a disruption in the security system's operation within the organization.
Recommendation
It is recommended to monitor network traffic and implement protections against SYN flood attacks.
Other vulnerabilities in iSmartAlarm cube devices
See all- CVE-2017-7729High
On iSmartAlarm cube devices, there is incorrect access control because a 'new key' is transmitted in cleartext.
- CVE-2017-7726High
iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability.
- CVE-2017-7728Critical
On iSmartAlarm cube devices, there is an authentication bypass leading to remote execution of commands, such as setting the alarm on/off, related to incorrect cryptography.
Original NVD description (English source)
iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the "cube" and it will stop responding.