Skip to content
Noroxi

kddi records

21 published records for vendor kddi.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 22
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

21 records
  • CVE-2019-6005
    40Plan

    Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the devi

    CriticalCVSS 9.8No exploitEPSS 2%

    kddi · smart tv box firmwareSep 12, 2019

  • CVE-2024-23978
    39Monitor

    Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier.

    CriticalCVSS 9.8No exploitEPSS 0%

    kddi · home spot cube 2 firmwareFeb 2, 2024

  • CVE-2017-2184
    35Monitor

    Buffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute arbitrary code via WebUI.

    HighCVSS 8.8No exploitEPSS 1%

    kddi · home spot cube 2 firmwareJul 7, 2017

  • CVE-2017-2186
    35Monitor

    HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to bypass authentication to load malicious firmware via WebUI.

    HighCVSS 8.8No exploitEPSS 1%

    kddi · home spot cube 2 firmwareJul 7, 2017

  • CVE-2017-2185
    35Monitor

    HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI.

    HighCVSS 8.8No exploitEPSS 0%

    kddi · home spot cube 2 firmwareJul 7, 2017

  • CVE-2022-33948
    35Monitor

    HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server.

    HighCVSS 8.8No exploitEPSS 0%

    kddi · home spot cube 2 firmwareJul 3, 2022

  • CVE-2024-28041
    35Monitor

    HGW BL1500HM Ver 002.001.013 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary command.

    HighCVSS 8.8No exploitEPSS 0%

    kddi corporation · hgw bl1500hmMar 25, 2024

  • CVE-2024-29071
    35Monitor

    HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue.

    HighCVSS 8.8No exploitEPSS 0%

    kddi corporation · hgw bl1500hmMar 25, 2024

  • CVE-2007-3692
    32Monitor

    Directory traversal vulnerability in download.cgi in EZFactory KDDI Download CGI 1.x allows remote attackers to read and download arbitrary

    HighCVSS 7.8No exploitEPSS 1%

    kddi · ezfactory download cgiJul 11, 2007

  • CVE-2017-2183
    32Monitor

    HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings.

    HighCVSS 8.0No exploitEPSS 0%

    kddi · home spot cube 2 firmwareJul 7, 2017

  • CVE-2017-2289
    31Monitor

    Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an attacker to gain privi

    HighCVSS 7.8No exploitEPSS 1%

    kddi · qua station firmwareAug 18, 2017

  • CVE-2018-0517
    31Monitor

    Untrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and earlier allows an attacker to gain privileges v

    HighCVSS 7.8No exploitEPSS 0%

    kddi · anshin net securityFeb 8, 2018

  • CVE-2024-21780
    30Monitor

    Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier.

    HighCVSS 7.5No exploitEPSS 0%

    kddi · home spot cube 2 firmwareFeb 2, 2024

  • CVE-2016-1139
    30Monitor

    Cross-site request forgery (CSRF) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hijack the authentication

    HighCVSS 7.5No exploitEPSS 0%

    kddi · home spot cube firmwareJan 30, 2016

  • CVE-2016-1137
    29Monitor

    Open redirect vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to redirect users to arbitrary web sites and con

    HighCVSS 7.4No exploitEPSS 1%

    kddi · home spot cube firmwareJan 30, 2016

  • CVE-2016-1140
    24Monitor

    KDDI HOME SPOT CUBE devices before 2 allow remote attackers to conduct clickjacking attacks via unspecified vectors.

    MediumCVSS 6.1No exploitEPSS 1%

    kddi · home spot cube firmwareJan 30, 2016

  • CVE-2018-0691
    23Monitor

    Multiple +Message Apps (Softbank +Message App for Android prior to version 10.1.7, Softbank +Message App for iOS prior to version 1.1.23, NT

    MediumCVSS 5.9No exploitEPSS 0%

    softbank · \+ messageNov 15, 2018

  • CVE-2016-1136
    21Monitor

    Cross-site scripting (XSS) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote authenticated users to inject arbitrary web s

    MediumCVSS 5.4No exploitEPSS 0%

    kddi · home spot cube firmwareJan 30, 2016

  • CVE-2022-43543
    21Monitor

    KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handling of Unicode control

    MediumCVSS 5.4No exploitEPSS 0%

    docomo · \+ messageDec 21, 2022

  • CVE-2016-1138
    18Monitor

    CRLF injection vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to inject arbitrary HTTP headers via unspecifie

    MediumCVSS 4.7No exploitEPSS 1%

    kddi · home spot cube firmwareJan 30, 2016

  • CVE-2016-1141
    18Monitor

    KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors.

    MediumCVSS 4.7No exploitEPSS 1%

    kddi · home spot cube firmwareJan 30, 2016