exploitDog

GHSA-4m98-g8q6-5r7m

Опубликовано: 13 мая 2022

Источник: github

Github: Не прошло ревью

CVSS3: 7.5

Описание

Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an exposed key.

Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an exposed key.

Ссылки

EPSS

Процентиль: 26%

0.00093

Низкий

7.5 High

CVSS3

CVE ID

Дефекты

CWE-312

Связанные уязвимости

CVE-2017-13663

CVSS3: 7.5

nvd

около 8 лет назад

Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an exposed key.

EPSS

Процентиль: 26%

0.00093

Низкий

7.5 High

CVSS3

CVE ID

Дефекты

CWE-312