PT-2017-12999 · Ismartalarm · Ismartalarm Cubeone

Yee Ching Tok · Publicado 2017-12-01 · Atualizado 2017-12-18 · CVE-2017-13664

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iSmartAlarm CubeOne versions 2.2.4.8 and earlier

Description The issue allows attackers to execute arbitrary commands with administrative privileges by retrieving credentials from an exposed password file in the firmware.

Recommendations For iSmartAlarm CubeOne versions 2.2.4.8 and earlier, update to a version later than 2.2.4.8 to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-13664

Produtos afetados

Ismartalarm Cubeone

Referências · 3

• 🔥 https://poppopretn.com/2017/11/30/public-disclosure-firmware-vulnerabilities-in-ismartalarm-cubeone · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-13664 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-13664 · Aviso do Fabricante