CVE-2018-16224

Publication date

2018-11-20 19:00:00

Family

mitre

State

PUBLISHED

Description

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device.