PT-2024-20215 · Unknown · Home Spot Cube2

Name of the Vulnerable Software and Affected Versions: HOME SPOT CUBE2 versions V102 and earlier Description: A heap-based buffer overflow issue exists, allowing arbitrary code execution by processing invalid values. The affected products are no longer supported. Recommendations: For HOME SPOT...

The vulnerability of the KDDI Home Spot Cube2 router’s microprogramming software lies in the lack of measures to neutralize the special elements used in the operating system’s command set, allowing attackers to execute arbitrary operating system commands.

The vulnerability of the microprogrammed software of the KDDI Home Spot Cube2 relates to the failure to take measures to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands of the operating syste...

CVE-2022-33948

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product...

CVE-2022-33948

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product...

CVE-2022-33948

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product...

CVE-2022-33948

CVE-2022-33948 affects KDDI/HOME SPOT CUBE2 V102 and earlier, where an OS command injection arises from improper processing of data received from a DHCP server. An adjacent attacker on the WAN side could trigger arbitrary OS commands on affected devices. Root cause: DHCP data handling flaw leadin...

CVE-2022-33948

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product...

CVE-2022-33948: Improper Neutralization of Special Elements used in an OS Command

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product...

KDDI HOME SPOT CUBE OS Command Injection Vulnerability

KDDI HOME SPOT CUBE2 is a home wireless router from KDDI Japan. KDDI HOME SPOT CUBE2 is vulnerable to an operating system command injection vulnerability, which stems from data received from a DHCP server not being processed properly. An attacker could use this vulnerability to execute arbitrary...

HOME SPOT CUBE2 vulnerable to OS command injection

Overview HOME SPOT CUBE2 provided by KDDI CORPORATION contains an OS command injection vulnerability CWE-78 due to improper processing of data received from DHCP server. Alice Rose reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warnin...

JVN#41017328: HOME SPOT CUBE2 vulnerable to OS command injection

HOME SPOT CUBE2 provided by KDDI CORPORATION contains an OS command injection vulnerability CWE-78 due to improper processing of data received from DHCP server. Impact An arbitrary OS command may be executed on the product if a malicious DHCP server is placed on the WAN side of the product...

Buffer overflow

Buffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute arbitrary code via WebUI...

CVE-2017-2185

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI...

CVE-2017-2184

Buffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute arbitrary code via WebUI...

CVE-2017-2183

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings...

CVE-2017-2183

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings...

CVE-2017-2184

Buffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute arbitrary code via WebUI...

CVE-2017-2184

The CVE-2017-2184 entry affects the HOME SPOT CUBE2 firmware (V101 and earlier). The vulnerability is a buffer overflow in the WebUI that can allow an attacker with access to the device’s management screen to execute arbitrary code. Public sources (NVD, JVN, CVE list) corroborate that an attacker...

CVE-2017-2183

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings...

CVE-2017-2183

The CVE-2017-2183 issue affects KDDI HOME SPOT CUBE2 firmware versions V101 and earlier, where an OS command injection vulnerability exists in Clock Settings. Exploitation requires access to the management/clock settings UI, enabling an authenticated attacker to execute arbitrary OS commands on t...