CVE-2018-15124 Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows unauthenticated attacker extract clear text passwords and get root access on the device.
CriticalCVSS 9.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows unauthenticated attacker extract clear text passwords and get root access on the device.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zipato zipabox firmware | = 118 | No fix listed |
| kaspersky lab Zipato Zipabox Smart Home Controller | = BOARD REV - 1 | No fix listed |
| kaspersky lab Zipato Zipabox Smart Home Controller | = SYSTEM VERSION -118 | No fix listed |
References
- ics-cert.kaspersky.com third-party-advisory us-government-resource