Bose

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Bose records in CISA KEV

No Bose vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Soundtouch · all components

TI-2017-12995 CVE-2017-17751 · GHSA-6fmv-3chj-gfwv

MEDIUM 40

Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted web site that uses the WebSocket Protocol.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0101 Published 2018-03-24 No fix listed

TI-2018-09074 CVE-2018-12638 · GHSA-m34p-9pw2-9qp9

LOW 29

An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01058 Published 2019-03-17 No fix listed CWE-79

TI-2017-12994 CVE-2017-17750 · GHSA-hgxh-996h-gr32

LOW 25

Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00511 Published 2018-03-24 No fix listed CWE-79

TI-2017-12993 CVE-2017-17749 · GHSA-g6mx-c6fr-xwv7

LOW 25

Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00513 Published 2018-03-24 No fix listed CWE-79