Read the docs

KDDI CORPORATION

Records30All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

KDDI CORPORATION records in CISA KEV

No KDDI CORPORATION vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Home Spot Cube 2 Firmware 7 records MEDIUM Home Spot Cube Firmware 6 records LOW + Message 2 records LOW Anshin Net Security 1 record LOW Ezfactory Download Cgi 1 record LOW Qua Station Firmware 1 record LOW Smart Tv Box Firmware 1 record MEDIUM

Records

7 records in Home Spot Cube 2 Firmware · all components

TI-2022-14951 CVE-2022-33948 · GHSA-352j-2x5m-wf94

OS command injection in KDDI CORPORATION HOME SPOT CUBE2

Priority MEDIUM 40

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00929 Published 2022-07-04 No fix listed CWE-78
TI-2017-01486 CVE-2017-2186 · GHSA-5cmp-hg8h-m2f5

Improper authentication in KDDI CORPORATION HOME SPOT CUBE2

Priority MEDIUM 40

HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to bypass authentication to load malicious firmware via WebUI.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01033 Published 2017-07-07 No fix listed CWE-287
TI-2017-01483 CVE-2017-2183 · GHSA-v6xm-gcvx-99rx

OS command injection in KDDI CORPORATION HOME SPOT CUBE2

Priority LOW 36

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings.

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00849 Published 2017-07-07 No fix listed CWE-78
Open these records in search →