PatchTheCVEismartalarm vulnerabilities
Recent CVEs affecting ismartalarm products. 4 tracked.
ismartalarm has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2018-11-20. Highest priority: CVE-2017-13664 (score 63/100).
- CVE-2018-16224 MEDIUM 5.3 UPGRADE Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attac
- CVE-2018-16222 MEDIUM 6.8 UPGRADE Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application
- CVE-2017-13664 CRITICAL 9.8 UPGRADE Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to exec
- CVE-2017-13663 HIGH 7.5 UPGRADE Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to dec
FAQ
How do I fix ismartalarm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ismartalarm being exploited right now?
None of the tracked ismartalarm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ismartalarm CVE should I patch first?
CVE-2017-13664 currently ranks highest (63/100): Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to exec.