All packages
iSmartAlarm cube devices vulnerabilities
4 known CVE vulnerabilities in iSmartAlarm cube devices, translated and rated.
- CVE-2017-7730High
iSmartAlarm cube devices are vulnerable to Denial of Service attacks. Sending a SYN flood on port 12345 causes the 'cube' to freeze and stop responding.
- CVE-2017-7729High
On iSmartAlarm cube devices, there is incorrect access control because a 'new key' is transmitted in cleartext.
- CVE-2017-7726High
iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability.
- CVE-2017-7728Critical
On iSmartAlarm cube devices, there is an authentication bypass leading to remote execution of commands, such as setting the alarm on/off, related to incorrect cryptography.