Skip to content
Noroxi

onepeloton records

3 published records for vendor onepeloton.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 21

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

Bug bounty scope

The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.

All records

3 records
  • CVE-2021-40527
    30Monitor

    Exposure of senstive information to an unauthorised actor in the "com.onepeloton.erlich" mobile application up to and including version 1.7.

    HighCVSS 7.5No exploitEPSS 0%

    onepeloton · pelotonOct 25, 2021

  • CVE-2021-33887
    27Monitor

    Insufficient verification of data authenticity in Peloton TTR01 up to and including PTV55G allows an attacker with physical access to boot i

    MediumCVSS 6.8No exploitEPSS 0%

    onepeloton · ttr01 firmwareJun 15, 2021

  • CVE-2021-40526
    21Monitor

    Incorrect calculation of buffer size vulnerability in Peleton TTR01 up to and including PTV55G allows a remote attacker to trigger a Denial

    MediumCVSS 5.3No exploitEPSS 0%

    onepeloton · ttr01 firmwareOct 25, 2021