Kddi Home Spot Cube Firmware
6 CVEs affecting Kddi Home Spot Cube Firmware. Latest disclosed: 2016-01-30. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-1139 | High | 7.5 | 2016-01-30 | Cross-site request forgery (CSRF) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hijack the authentication of unspecified vic… |
CVE-2016-1137 | High | 7.4 | 2016-01-30 | Open redirect vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attac… |
CVE-2016-1140 | Medium | 6.1 | 2016-01-30 | KDDI HOME SPOT CUBE devices before 2 allow remote attackers to conduct clickjacking attacks via unspecified vectors. |
CVE-2016-1136 | Medium | 5.4 | 2016-01-30 | Cross-site scripting (XSS) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote authenticated users to inject arbitrary web script or HTML via u… |
CVE-2016-1141 | Medium | 4.7 | 2016-01-30 | KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors. |
CVE-2016-1138 | Medium | 4.7 | 2016-01-30 | CRLF injection vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to inject arbitrary HTTP headers via unspecified vectors. |