Yee Ching Tok

**Name of the Vulnerable Software and Affected Versions** iSmartAlarm CubeOne versions 2.2.4.8 and earlier **Description** The issue allows attackers to decrypt log files due to an exposed encryption key in the firmware. **Recommendations** For iSmartAlarm CubeOne versions 2.2.4.8 and earlier, update to a version later than 2.2.4.8 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iSmartAlarm CubeOne versions 2.2.4.8 and earlier **Description** The issue allows attackers to execute arbitrary commands with administrative privileges by retrieving credentials from an exposed password file in the firmware. **Recommendations** For iSmartAlarm CubeOne versions 2.2.4.8 and earlier, update to a version later than 2.2.4.8 to resolve the issue.