Roku

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Roku records in CISA KEV

No Roku vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Roku Firmware · all components

TI-2018-08061 CVE-2018-11314 · GHSA-chc2-rvc6-vpg5

MEDIUM 45

The External Control API in Roku and Roku TV products allow unauthorized access via a DNS Rebind attack.

CVSS 3.0CRITICAL 9.6 Network No auth User interaction EPSS 0.01928 Published 2018-07-03 No fix listed CWE-20