CVE-2018-16224

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted…

published November 20, 2018

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06594 · 93.8th percentile
Published
2018-11-20T19:00Z
EPSS history
Timeline
  • 20 NOV 19:00Z
    Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted…
    cvelistv5