Vulnerabilities

TI-2018-09074 CVE-2018-12638 · GHSA-m34p-9pw2-9qp9

An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS.

LOW 29

An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01058 Published 2019-03-17 No fix listed CWE-79

TI-2017-12995 CVE-2017-17751 · GHSA-6fmv-3chj-gfwv

MEDIUM 40

Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted web site that uses the WebSocket Protocol.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0101 Published 2018-03-24 No fix listed

TI-2017-12994 CVE-2017-17750 · GHSA-hgxh-996h-gr32

LOW 25

Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00511 Published 2018-03-24 No fix listed CWE-79

TI-2017-12993 CVE-2017-17749 · GHSA-g6mx-c6fr-xwv7

LOW 25

Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00513 Published 2018-03-24 No fix listed CWE-79