Kddi Corporation Home Spot Cube2
7 CVEs affecting Kddi Corporation Home Spot Cube2. Latest disclosed: 2024-02-02. Critical: 1, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-23978 | Critical | 9.8 | 2024-02-02 | Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. By processing invalid values, arbitrary code may be executed. Note that th… |
CVE-2022-33948 | High | 8.8 | 2022-07-04 | HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may exec… |
CVE-2017-2186 | High | 8.8 | 2017-07-07 | HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to bypass authentication to load malicious firmware via WebUI. |
CVE-2017-2185 | High | 8.8 | 2017-07-07 | HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI. |
CVE-2017-2184 | High | 8.8 | 2017-07-07 | Buffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute arbitrary code via WebUI. |
CVE-2017-2183 | High | 8.0 | 2017-07-07 | HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings. |
CVE-2024-21780 | High | 7.5 | 2024-02-02 | Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. Processing a specially crafted command may result in a denial of service… |