TI-2018-09074 CVE-2018-12638 · GHSA-m34p-9pw2-9qp9
An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS.
Priority LOW 29
An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS.
Vulnerabilities
5 records
TI-2017-12995 CVE-2017-17751 · GHSA-6fmv-3chj-gfwv
Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted…
Priority MEDIUM 40
Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted web site that uses the WebSocket Protocol.
TI-2017-12994 CVE-2017-17750 · GHSA-hgxh-996h-gr32
Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify.
Priority LOW 25
Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify.
TI-2017-12993 CVE-2017-17749 · GHSA-g6mx-c6fr-xwv7
Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora.
Priority LOW 25
Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora.
TI-2017-04304 CVE-2017-6520 · GHSA-2vcg-w879-pf3h
The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to…
Priority MEDIUM 43
The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traf…