GCVE-110-CERTCC-2015-573848

Advisory PublishedCVSS 7.6/10

Vulnetix · Advisory published October 29, 2015

All firmware versions of Qolsys IQ Panel contain hard-coded cryptographic keys, do not validate signatures during software updates, and use a vulnerable version of Android OS.

Download JSON Open in Console

Risk Scores

CVSS 2.0

7.6/10

High · AV:N/AC:H/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact4d1_population1d1_direct_report1

certcc-cvss-temporal-env

temporal_score6.8remediation_levelUreport_confidenceCenvironmental_score5.13683856target_distributionMenvironmental_vectorCDP:N/TD:M/CR:ND/IR:ND/AR:ND