Bose & Sonos Smart Speakers can be Hacked to Play Disturbing Sounds

By Waqas Another day, another IoT flaw Sonos and Bose Smart This is a post from HackRead.com Read the original post: Bose Sonos Smart Speakers can be Hacked to Play Disturbing Sounds...

Code injection

The Multicast DNS mDNS responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtain potentially sensitive information via port-5353 UDP...

CVE-2017-6520

The Multicast DNS mDNS responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service traffic amplification or obtain potentially sensitive information via port-5353 UDP...

CVE-2017-6520

The CVE-2017-6520 issue affects the mDNS responder in Bose SoundTouch 30. The vulnerable behavior is that the mDNS responder answers IPv4 unicast queries with non-link-local source addresses, enabling remote attackers to trigger traffic amplification and potentially obtain sensitive information o...

bose.com XSS vulnerability

Vulnerable URL: https://www.bose.com/enus/search.html?category==asd%22%3C/script%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11585 VIP website status:| Yes...

worldwide.bose.com XSS vulnerability

Open Bug Bounty ID: OBB-163986 Description| Value ---|--- Affected Website:| worldwide.bose.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Ubuntu: Security Advisory (USN-2985-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Bose Connect - Customized SSL, KeyStore usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Bose Connect published at the 'play' market has multiple vulnerabilities...

Fedora 21 : freeipa-4.1.4-1.fc21 / slapi-nis-0.54.2-1.fc21 (2015-4747)

CVE-2015-1827: It was discovered that the IPA extdom Directory Server plug-in did not correctly perform memory reallocation when handling user account information. A request for a list of groups for a user that belongs to a large number of groups would cause a Directory Server to crash...

CentOS 7 : ipa / slapi-nis (CESA-2015:0728)

Updated ipa and slapi-nis packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

[SECURITY] [DSA 3085-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3085-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez December 03, 2014 http://www.debian.org/security/faq -...