CVE-2018-16222: Ismartalarm

Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application through 2.0.8 for Android allows an attacker to retrieve the username and password.

Affected products

• Ismartalarm Ismartalarm: up to and including 2.0.8

Published 2018-11-20. Last modified 2026-06-17.