Vulnerability Description
Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an exposed key.
CVSS Score
7.5
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ismartalarm | Cubeone Firmware | <= 2.2.4.8 |
| Ismartalarm | Cubeone | - |
Related Weaknesses (CWE)
References
- https://poppopretn.com/2017/11/30/public-disclosure-firmware-vulnerabilities-in-ExploitThird Party Advisory
- https://poppopretn.com/2017/11/30/public-disclosure-firmware-vulnerabilities-in-ExploitThird Party Advisory
FAQ
What is CVE-2017-13663?
CVE-2017-13663 is a vulnerability with a CVSS score of 7.5 (HIGH). Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an exposed key.
How severe is CVE-2017-13663?
CVE-2017-13663 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-13663?
Check the references section above for vendor advisories and patch information. Affected products include: Ismartalarm Cubeone Firmware, Ismartalarm Cubeone.