PT-2017-17912 · Ismartalarm · Ismartalarm Cube

Publicado 2017-07-11 · Atualizado 2021-08-25 · CVE-2017-7728

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions iSmartAlarm cube devices (affected versions not specified)

Description The issue is related to incorrect cryptography, leading to authentication bypass. This allows for the remote execution of commands, such as setting the alarm on or off.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2017-7728

Produtos afetados

Ismartalarm Cube

Referências · 2

• 🔥 http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-7728 · Nota de Segurança