Onepeloton

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Onepeloton records in CISA KEV

No Onepeloton vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ttr01 Firmware 2 records LOW Peloton 1 record LOW

Records

1 record in Peloton · all components

TI-2021-17567 CVE-2021-40527 · GHSA-pp98-w696-5gp2

Exposure of senstive information to an unauthorised actor in the "com.onepeloton.erlich"…

LOW 38

Exposure of senstive information to an unauthorised actor in the "com.onepeloton.erlich" mobile application up to and including version 1.7.22 allows a remote attacker to access developer files stored in an AWS S3 bucket…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00694 Published 2021-10-25 No fix listed CWE-312

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0