Vendors / Bose Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Bose records in CISA KEV No Bose vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traf…
CVSS 3.0 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01982 · Published 2017-05-01 · No fix listed CWE-417
Priority MEDIUM 40
Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted web site that uses the WebSocket Protocol.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.0101 · Published 2018-03-24 · No fix listed
Priority LOW 29
An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01058 · Published 2019-03-17 · No fix listed CWE-79
Priority LOW 25
Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00511 · Published 2018-03-24 · No fix listed CWE-79
Priority LOW 25
Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00513 · Published 2018-03-24 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 1 3 0 0
