bose records
5 published records for vendor bose.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-417 Communication Channel Errors1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
Bug bounty scope
The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
37Monitor | CVE-2017-6520No exploit | The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are bose · soundtouch 30 · CWE-417 | Critical9.1 | — | 1.9% | Apr 30, 2017 |
35Monitor | CVE-2017-17751No exploit | Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted web site that uses the WebSocket Protocol.bose · soundtouch | High8.8 | — | 1.0% | Mar 24, 2018 |
24Monitor | CVE-2018-12638No exploit | An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS.bose · soundtouch · CWE-79 | Medium6.1 | — | 1.0% | Mar 21, 2019 |
21Monitor | CVE-2017-17749No exploit | Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora.bose · soundtouch · CWE-79 | Medium5.4 | — | 0.5% | Mar 24, 2018 |
21Monitor | CVE-2017-17750No exploit | Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify.bose · soundtouch · CWE-79 | Medium5.4 | — | 0.5% | Mar 24, 2018 |
- CVE-2017-652037Monitor
The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are
CriticalCVSS 9.1No exploitEPSS 1%bose · soundtouch 30Apr 30, 2017
- CVE-2017-1775135Monitor
Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted web site that uses the WebSocket Protocol.
HighCVSS 8.8No exploitEPSS 1%bose · soundtouchMar 24, 2018
- CVE-2018-1263824Monitor
An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS.
MediumCVSS 6.1No exploitEPSS 1%bose · soundtouchMar 21, 2019
- CVE-2017-1774921Monitor
Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora.
MediumCVSS 5.4No exploitEPSS 0%bose · soundtouchMar 24, 2018
- CVE-2017-1775021Monitor
Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify.
MediumCVSS 5.4No exploitEPSS 0%bose · soundtouchMar 24, 2018