CVE-2017-17751 - Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted web site tha

CVE-2017-17751

Summary

Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted web site that uses the WebSocket Protocol.

References

Vulnerable Configurations

cpe:2.3:a:bose:soundtouch:-:*:*:*:*:iphone_os:*:*
cpe:2.3:a:bose:soundtouch:-:*:*:*:*:iphone_os:*:*
cpe:2.3:a:bose:soundtouch:-:*:*:*:*:android:*:*
cpe:2.3:a:bose:soundtouch:-:*:*:*:*:android:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

misc

http://aryanitin.com/2017-12-20-CVE-2017-17751/

Last major update

14-02-2024 - 01:17

Published

24-03-2018 - 18:29

Last modified

14-02-2024 - 01:17