cvedb.io
CVE-2018-15124
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2018-08-13T21:48:01.477 · Last modified 2026-06-17T01:42:05.190

Summary

Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows unauthenticated attacker extract clear text passwords and get root access on the device.

Affected products

zipato — zipabox_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when zipato ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.