GCVE - cpe:2.3:h:ismartalarm:cubeone:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:ismartalarm:cubeone:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Ismartalarm (`51e3f8ab-11e3-54a7-910e-2b1471fea928`)
Product	Cubeone (`525b003e-6762-59ad-b86c-1bfe977f5f63`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-16224`	not_vulnerable	2026-06-08 05:11:04.497422	Details available Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device. Published: 2018-11-20T19:00:00.000Z Updated: 2024-08-05T10:17:38.387Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2018/Nov/2 http://packetstormsecurity.com/files/150165/QBee-Camera-iSmartAlarm-Credential-Disclosure.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7730`	not_vulnerable	2026-06-08 05:10:05.964949	Details available iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the "cube" and it will stop responding. Published: 2017-07-11T17:00:00.000Z Updated: 2024-08-05T16:12:28.244Z Open on db.gcve.eu Reference links http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7729`	not_vulnerable	2026-06-08 05:10:05.964637	Details available On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartext. Published: 2017-07-11T17:00:00.000Z Updated: 2024-08-05T16:12:28.409Z Open on db.gcve.eu Reference links http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7728`	not_vulnerable	2026-06-08 05:10:05.964318	Details available On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., setting the alarm on/off), related to incorrect cryptography. Published: 2017-07-11T17:00:00.000Z Updated: 2024-08-05T16:12:28.336Z Open on db.gcve.eu Reference links http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7726`	not_vulnerable	2026-06-08 05:10:05.963687	Details available iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability. Published: 2017-07-11T17:00:00.000Z Updated: 2024-08-05T16:12:28.277Z Open on db.gcve.eu Reference links http://dojo.bullguard.com/blog/burglar-hacker-when-a-physical-security-is-compromised-by-iot-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-13664`	not_vulnerable	2026-06-08 05:08:48.694817	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-13663`	not_vulnerable	2026-06-08 05:08:48.694389	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.