CVE-2018-16224: Ismartalarm Cubeone Firmware

Medium severity, CVSS 5.3. EPSS: 6.6% chance of exploitation in the next 30 days.

Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and access sensitive information from the device.

Affected products

• Ismartalarm Cubeone Firmware: up to and including 2.2.4.10

Published 2018-11-20. Last modified 2026-06-17.