CVE-2017-13664

9.8 criticalEPSS 1.5%

Critical (9.8) in ismartalarm cubeone firmware. EPSS 1.5% chance of exploitation in the next 30 days.

Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to execute arbitrary commands with administrative privileges by retrieving credentials from this file.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2017-12-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ismartalarm:cubeone_firmware

References

https://poppopretn.com/2017/11/30/public-disclosure-firmware-vulnerabilities-in-ismartalarm-cubeone/
https://poppopretn.com/2017/11/30/public-disclosure-firmware-vulnerabilities-in-ismartalarm-cubeone/

Check your stack JSON