Description
HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| KDDI | HOME SPOT CUBE2 | firmware V101 and earlier | — |
References
- https://www.au.com/information/notice_mobile/update/update-20170612-01/
- 99282 vdb-entry
- JVN#24348065 third-party-advisory