PatchTheCVE: cubeone firmwarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-16224: Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attachttps://patchthecve.com/cve/CVE-2018-16224.htmlhttps://patchthecve.com/cve/CVE-2018-16224.htmlWed, 17 Jun 2026 01:43:54 +0000MEDIUM 5.3: Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device.CVE-2017-13664: Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to exechttps://patchthecve.com/cve/CVE-2017-13664.htmlhttps://patchthecve.com/cve/CVE-2017-13664.htmlWed, 17 Jun 2026 01:04:56 +0000CRITICAL 9.8: Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to execute arbitrary commands with administrative privileges by retrieving credentials from this file.CVE-2017-13663: Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to dechttps://patchthecve.com/cve/CVE-2017-13663.htmlhttps://patchthecve.com/cve/CVE-2017-13663.htmlWed, 17 Jun 2026 01:04:56 +0000HIGH 7.5: Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an exposed key.CVE-2017-7730: iSmartAlarm cube devices allow Denial of Servicehttps://patchthecve.com/cve/CVE-2017-7730.htmlhttps://patchthecve.com/cve/CVE-2017-7730.htmlWed, 17 Jun 2026 01:25:03 +0000HIGH 7.5: iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the "cube" and it will stop responding.CVE-2017-7729: On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartexthttps://patchthecve.com/cve/CVE-2017-7729.htmlhttps://patchthecve.com/cve/CVE-2017-7729.htmlWed, 17 Jun 2026 01:25:03 +0000HIGH 7.5: On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartext.CVE-2017-7728: On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., sethttps://patchthecve.com/cve/CVE-2017-7728.htmlhttps://patchthecve.com/cve/CVE-2017-7728.htmlWed, 17 Jun 2026 01:25:03 +0000CRITICAL 9.8: On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., setting the alarm on/off), related to incorrect cryptography.CVE-2017-7726: iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability.https://patchthecve.com/cve/CVE-2017-7726.htmlhttps://patchthecve.com/cve/CVE-2017-7726.htmlWed, 17 Jun 2026 01:25:02 +0000HIGH 7.5: iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability.