Roku records

5 published records for vendor roku.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2018-11314No exploit	The External Control API in Roku and Roku TV products allow unauthorized access via a DNS Rebind attack.roku · roku firmware · CWE-20 Pre-auth	Critical9.6	—	1.9%	Jul 3, 2018
35Monitor	CVE-2023-6322No exploit	Stack-based buffer overflow in message parser functionalityroku · indoor camera se firmware · CWE-121 Memory safety	High8.8	—	1.0%	May 15, 2024
35Monitor	CVE-2023-6324No exploit	ThroughTek Kalay SDK error in handling the PSK identitythroughtek · kalay platform · CWE-457	High8.8	—	0.7%	May 15, 2024
26Monitor	CVE-2023-6323No exploit	ThroughTek Kalay SDK insufficient verification of message authenticitythroughtek · kalay platform · CWE-345 Pre-auth	Medium6.5	—	0.3%	May 15, 2024
22Monitor	CVE-2022-27152No exploit	Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification.roku · roku os	Medium5.7	—	0.3%	Apr 8, 2022

CVE-2018-11314
39Monitor
The External Control API in Roku and Roku TV products allow unauthorized access via a DNS Rebind attack.
CriticalCVSS 9.6No exploitEPSS 1%
- Pre-auth
roku · roku firmwareJul 3, 2018
CVE-2023-6322
35Monitor
Stack-based buffer overflow in message parser functionality
HighCVSS 8.8No exploitEPSS 1%
- Memory safety
roku · indoor camera se firmwareMay 15, 2024
CVE-2023-6324
35Monitor
ThroughTek Kalay SDK error in handling the PSK identity
HighCVSS 8.8No exploitEPSS 0%
throughtek · kalay platformMay 15, 2024
CVE-2023-6323
26Monitor
ThroughTek Kalay SDK insufficient verification of message authenticity
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
throughtek · kalay platformMay 15, 2024
CVE-2022-27152
22Monitor
Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification.
MediumCVSS 5.7No exploitEPSS 0%
roku · roku osApr 8, 2022