Blynk records

5 published records for vendor blynk.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2022-29496No exploit	A stack-based buffer overflow vulnerability exists in the BlynkConsole.h runCommand functionality of Blynk -Library v1.0.1.blynk · blynk-library · CWE-121 pre-auth RCE Memory safety	Critical9.8	—	2.0%	Jun 17, 2022
31Monitor	CVE-2018-17785No exploit	In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as deblynk · blynk-server · CWE-22 Pre-auth Path traversal	High7.5	—	2.1%	Sep 30, 2018
22Monitor	CVE-2019-5065No exploit	An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1.blynk · blynk-library · CWE-125 Pre-auth Memory safety	Medium5.3	—	1.9%	Sep 5, 2019
21Monitor	CVE-2014-7019No exploit	The Clarks Inn (aka com.ClarksInn) application 3.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-thblynk · clarks inn · CWE-310	Medium5.4	—	0.3%	Oct 16, 2014
21Monitor	CVE-2014-6969No exploit	The Deltin Suites (aka com.DeltinSuites) application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows manblynk · deltin suites · CWE-310	Medium5.4	—	0.3%	Oct 16, 2014

CVE-2022-29496
40Plan
A stack-based buffer overflow vulnerability exists in the BlynkConsole.h runCommand functionality of Blynk -Library v1.0.1.
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Memory safety
blynk · blynk-libraryJun 17, 2022
CVE-2018-17785
31Monitor
In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as de
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Path traversal
blynk · blynk-serverSep 30, 2018
CVE-2019-5065
22Monitor
An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1.
MediumCVSS 5.3No exploitEPSS 2%
- Pre-auth
- Memory safety
blynk · blynk-librarySep 5, 2019
CVE-2014-7019
21Monitor
The Clarks Inn (aka com.ClarksInn) application 3.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-th
MediumCVSS 5.4No exploitEPSS 0%
blynk · clarks innOct 16, 2014
CVE-2014-6969
21Monitor
The Deltin Suites (aka com.DeltinSuites) application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man
MediumCVSS 5.4No exploitEPSS 0%
blynk · deltin suitesOct 16, 2014