İçeriğe atla
Noroxi

kddi kayıtları

kddi üreticisine ait 21 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
5
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 22
  5. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

21 kayıt
  • CVE-2019-6005
    40Planlayın

    Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the devi

    KritikCVSS 9,8İstismar yokEPSS %2

    kddi · smart tv box firmware12 Eyl 2019

  • CVE-2024-23978
    39İzleyin

    Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier.

    KritikCVSS 9,8İstismar yokEPSS %1

    kddi · home spot cube 2 firmware2 Şub 2024

  • CVE-2017-2184
    35İzleyin

    Buffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute arbitrary code via WebUI.

    YüksekCVSS 8,8İstismar yokEPSS %1

    kddi · home spot cube 2 firmware7 Tem 2017

  • CVE-2017-2186
    35İzleyin

    HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to bypass authentication to load malicious firmware via WebUI.

    YüksekCVSS 8,8İstismar yokEPSS %1

    kddi · home spot cube 2 firmware7 Tem 2017

  • CVE-2017-2185
    35İzleyin

    HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI.

    YüksekCVSS 8,8İstismar yokEPSS %1

    kddi · home spot cube 2 firmware7 Tem 2017

  • CVE-2022-33948
    35İzleyin

    HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server.

    YüksekCVSS 8,8İstismar yokEPSS %1

    kddi · home spot cube 2 firmware3 Tem 2022

  • CVE-2024-28041
    35İzleyin

    HGW BL1500HM Ver 002.001.013 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary command.

    YüksekCVSS 8,8İstismar yokEPSS %1

    kddi corporation · hgw bl1500hm25 Mar 2024

  • CVE-2024-29071
    35İzleyin

    HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue.

    YüksekCVSS 8,8İstismar yokEPSS %0

    kddi corporation · hgw bl1500hm25 Mar 2024

  • CVE-2007-3692
    32İzleyin

    Directory traversal vulnerability in download.cgi in EZFactory KDDI Download CGI 1.x allows remote attackers to read and download arbitrary

    YüksekCVSS 7,8İstismar yokEPSS %2

    kddi · ezfactory download cgi11 Tem 2007

  • CVE-2017-2183
    32İzleyin

    HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings.

    YüksekCVSS 8,0İstismar yokEPSS %1

    kddi · home spot cube 2 firmware7 Tem 2017

  • CVE-2017-2289
    31İzleyin

    Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an attacker to gain privi

    YüksekCVSS 7,8İstismar yokEPSS %1

    kddi · qua station firmware18 Ağu 2017

  • CVE-2018-0517
    31İzleyin

    Untrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and earlier allows an attacker to gain privileges v

    YüksekCVSS 7,8İstismar yokEPSS %1

    kddi · anshin net security8 Şub 2018

  • CVE-2024-21780
    30İzleyin

    Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier.

    YüksekCVSS 7,5İstismar yokEPSS %1

    kddi · home spot cube 2 firmware2 Şub 2024

  • CVE-2016-1139
    30İzleyin

    Cross-site request forgery (CSRF) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hijack the authentication

    YüksekCVSS 7,5İstismar yokEPSS %1

    kddi · home spot cube firmware30 Oca 2016

  • CVE-2016-1137
    29İzleyin

    Open redirect vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to redirect users to arbitrary web sites and con

    YüksekCVSS 7,4İstismar yokEPSS %1

    kddi · home spot cube firmware30 Oca 2016

  • CVE-2016-1140
    24İzleyin

    KDDI HOME SPOT CUBE devices before 2 allow remote attackers to conduct clickjacking attacks via unspecified vectors.

    OrtaCVSS 6,1İstismar yokEPSS %1

    kddi · home spot cube firmware30 Oca 2016

  • CVE-2018-0691
    23İzleyin

    Multiple +Message Apps (Softbank +Message App for Android prior to version 10.1.7, Softbank +Message App for iOS prior to version 1.1.23, NT

    OrtaCVSS 5,9İstismar yokEPSS %1

    softbank · \+ message15 Kas 2018

  • CVE-2016-1136
    21İzleyin

    Cross-site scripting (XSS) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote authenticated users to inject arbitrary web s

    OrtaCVSS 5,4İstismar yokEPSS %1

    kddi · home spot cube firmware30 Oca 2016

  • CVE-2022-43543
    21İzleyin

    KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handling of Unicode control

    OrtaCVSS 5,4İstismar yokEPSS %0

    docomo · \+ message21 Ara 2022

  • CVE-2016-1138
    18İzleyin

    CRLF injection vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to inject arbitrary HTTP headers via unspecifie

    OrtaCVSS 4,7İstismar yokEPSS %1

    kddi · home spot cube firmware30 Oca 2016

  • CVE-2016-1141
    18İzleyin

    KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors.

    OrtaCVSS 4,7İstismar yokEPSS %1

    kddi · home spot cube firmware30 Oca 2016