Bose

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 5
    Known Exploited: 0
    1
    Critical Level Threats
    1
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2018-12638

    An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS. There is no frontend input validation of the device name. A malicious device name can execute JavaScript on the registered Bose User Account if a speaker has been connected to the app.

    Last Modified: Nov 21, 2024
    Published: Mar 17, 2019

    CVE-2017-17749

    Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora.

    Last Modified: Nov 21, 2024
    Published: Mar 24, 2018

    CVE-2017-17750

    Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify.

    Last Modified: Nov 21, 2024
    Published: Mar 24, 2018

    CVE-2017-17751

    Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted web site that uses the WebSocket Protocol.

    Last Modified: Nov 21, 2024
    Published: Mar 24, 2018

    CVE-2017-6520

    The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets.

    Last Modified: Apr 20, 2025
    Published: May 01, 2017
    Items Per Page
    Bose Vulnerabilities & Security CVEs | CVE-DB