Insecure Configuration Storage Vulnerability in Zipato Zipabox Smart Home Controller
CVE-2018-15123

9.8CRITICAL

Key Information:

Vendor
Kaspersky
Status
Zipato Zipabox Smart Home Controller
Vendor
CVE Published:
13 August 2018

Summary

The Zipato Zipabox Smart Home Controller is susceptible to vulnerabilities due to insecure configuration storage. This flaw could allow remote attackers to exploit the device, potentially gaining control over the smart home environment. This presents serious security implications for users, as it opens up new avenues for unauthorized access and manipulation of connected devices.

Affected Version(s)

Zipato Zipabox Smart Home Controller BOARD REV - 1

Zipato Zipabox Smart Home Controller SYSTEM VERSION -118

References

https://ics-cert.kaspersky.com/advisories/klcert-advisori...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.