CVEDB API

Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an exposed key.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 26.7%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2017-13663

Ismartalarm » Cubeone » Version: N/A

cpe:2.3:h:ismartalarm:cubeone:-
Ismartalarm » Cubeone Firmware » Version: N/A

cpe:2.3:o:ismartalarm:cubeone_firmware:-
Ismartalarm » Cubeone Firmware » Version: 1.3.3.1

cpe:2.3:o:ismartalarm:cubeone_firmware:1.3.3.1
Ismartalarm » Cubeone Firmware » Version: 1.5.3.0

cpe:2.3:o:ismartalarm:cubeone_firmware:1.5.3.0
Ismartalarm » Cubeone Firmware » Version: 1.6.3.0

cpe:2.3:o:ismartalarm:cubeone_firmware:1.6.3.0
Ismartalarm » Cubeone Firmware » Version: 1.7.2.0

cpe:2.3:o:ismartalarm:cubeone_firmware:1.7.2.0
Ismartalarm » Cubeone Firmware » Version: 1.7.3.2

cpe:2.3:o:ismartalarm:cubeone_firmware:1.7.3.2
Ismartalarm » Cubeone Firmware » Version: 2.1.4.1

cpe:2.3:o:ismartalarm:cubeone_firmware:2.1.4.1
Ismartalarm » Cubeone Firmware » Version: 2.2.4.8

cpe:2.3:o:ismartalarm:cubeone_firmware:2.2.4.8