zipabox firmware vulnerabilities and fixes
Recent CVEs affecting zipabox firmware, with upgrade or downgrade steps. 3 tracked.
Also searched as: zipaboxfirmware.
zipabox firmware has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-08-13. Highest priority: CVE-2018-15123 (score 60/100).
- CVE-2018-15125 HIGH 7.5 MITIGATE Sensitive Information Disclosure in Zipato Zipabox Smart Home Controller allows remote attacker get sensitive
- CVE-2018-15124 CRITICAL 9.8 MITIGATE Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows u
- CVE-2018-15123 CRITICAL 9.8 MITIGATE Insecure configuration storage in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118
FAQ
How do I fix zipabox firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zipabox firmware being exploited right now?
None of the tracked zipabox firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zipabox firmware CVE should I patch first?
CVE-2018-15123 currently ranks highest (60/100): Insecure configuration storage in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 .