Code injection

The Multicast DNS mDNS responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtain potentially sensitive information via port-5353 UDP...

CVE-2017-6520

The Multicast DNS mDNS responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtain potentially sensitive information via port-5353 UDP...

CVE-2017-6520

The CVE-2017-6520 issue affects the mDNS responder in Bose SoundTouch 30. The vulnerable behavior is that the mDNS responder answers IPv4 unicast queries with non-link-local source addresses, enabling remote attackers to trigger traffic amplification and potentially obtain sensitive information o...

SoundTouch Controller - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application SoundTouch Controller published at the 'play' market has multiple vulnerabilities...