PatchTheCVEcubeone firmware vulnerabilities and fixes
Recent CVEs affecting cubeone firmware, with upgrade or downgrade steps. 7 tracked.
Also searched as: cubeonefirmware.
cubeone firmware has 7 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2018-11-20. Highest priority: CVE-2017-7728 (score 67/100).
- CVE-2018-16224 MEDIUM 5.3 UPGRADE Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attac
- CVE-2017-7730 HIGH 7.5 MITIGATE iSmartAlarm cube devices allow Denial of Service
- CVE-2017-7729 HIGH 7.5 MITIGATE On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartext
- CVE-2017-7728 CRITICAL 9.8 MITIGATE On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., set
- CVE-2017-7726 HIGH 7.5 MITIGATE iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability.
- CVE-2017-13664 CRITICAL 9.8 UPGRADE Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to exec
- CVE-2017-13663 HIGH 7.5 UPGRADE Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to dec
FAQ
How do I fix cubeone firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cubeone firmware being exploited right now?
None of the tracked cubeone firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cubeone firmware CVE should I patch first?
CVE-2017-7728 currently ranks highest (67/100): On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., set.