Kddi

Home Spot Cube 2 Firmware

7 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-23978

  • EPSS 0.36%
  • Published 02.02.2024 07:15:12
  • Last modified 15.05.2025 20:15:44

Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. By processing invalid values, arbitrary code may be executed. Note that the affected products are no longer supported.

7.5

CVE-2024-21780

  • EPSS 1.15%
  • Published 02.02.2024 07:15:10
  • Last modified 16.06.2025 19:15:30

Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. Processing a specially crafted command may result in a denial of service (DoS) condition. Note that the affected products are no longer supported.

8.8

CVE-2022-33948

  • EPSS 0.78%
  • Published 04.07.2022 02:15:07
  • Last modified 21.11.2024 07:08:39

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN ...

8

CVE-2017-2183

  • EPSS 0.54%
  • Published 07.07.2017 13:29:00
  • Last modified 20.04.2025 01:37:25

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings.

8.8

CVE-2017-2184

  • EPSS 0.76%
  • Published 07.07.2017 13:29:00
  • Last modified 20.04.2025 01:37:25

Buffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute arbitrary code via WebUI.

8.8

CVE-2017-2185

  • EPSS 0.91%
  • Published 07.07.2017 13:29:00
  • Last modified 20.04.2025 01:37:25

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI.

8.8

CVE-2017-2186

  • EPSS 0.5%
  • Published 07.07.2017 13:29:00
  • Last modified 20.04.2025 01:37:25

HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to bypass authentication to load malicious firmware via WebUI.