PT-2017-17912 · Ismartalarm · Ismartalarm Cube

Published 2017-07-11 · Updated 2021-08-25 · CVE-2017-7728

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions iSmartAlarm cube devices (affected versions not specified)

Description The issue is related to incorrect cryptography, leading to authentication bypass. This allows for the remote execution of commands, such as setting the alarm on or off.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2017-7728

Affected Products

Ismartalarm Cube

References · 2

• 🔥 http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-7728 · Security Note