GCVE - cpe:2.3:a:kddi_corporation:home_spot_cube2:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:kddi_corporation:home_spot_cube2:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Kddi Corporation (`c55f60ae-7c0a-547e-8604-3cfea49377cb`)
Product	Home Spot Cube2 (`29ef9b6d-72bc-5053-9509-7d09828751d6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-23978`	vulnerable	2026-06-08 06:29:41.031201	Details available Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. By processing invalid values, arbitrary code may be executed. Note that the affected products are no longer supported. Published: 2024-02-02T06:38:33.253Z Updated: 2025-05-15T19:50:24.669Z Open on db.gcve.eu Reference links https://www.au.com/support/service/mobile/guide/wlan/home_spot_cube_2/ https://jvn.jp/en/vu/JVNVU93740658/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-21780`	vulnerable	2026-06-08 06:27:36.594086	Details available Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. Processing a specially crafted command may result in a denial of service (DoS) condition. Note that the affected products are no longer supported. Published: 2024-02-02T06:38:19.377Z Updated: 2025-06-16T18:27:12.694Z Open on db.gcve.eu Reference links https://www.au.com/support/service/mobile/guide/wlan/home_spot_cube_2/ https://jvn.jp/en/vu/JVNVU93740658/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-33948`	vulnerable	2026-06-08 05:44:51.841909	Details available HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product. Published: 2022-07-04T01:50:49.000Z Updated: 2024-08-03T08:16:15.975Z Open on db.gcve.eu Reference links https://www.au.com/support/service/mobile/guide/wlan/home_spot_cube_2/ https://jvn.jp/en/jp/JVN41017328/index.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2186`	vulnerable	2026-06-08 05:09:23.859334	Details available HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to bypass authentication to load malicious firmware via WebUI. Published: 2017-07-07T13:00:00.000Z Updated: 2024-08-05T13:48:03.713Z Open on db.gcve.eu Reference links https://www.au.com/information/notice_mobile/update/update-20170612-01/ http://www.securityfocus.com/bid/99282 http://jvn.jp/en/jp/JVN24348065/index.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2185`	vulnerable	2026-06-08 05:09:23.858954	Details available HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI. Published: 2017-07-07T13:00:00.000Z Updated: 2024-08-05T13:48:03.723Z Open on db.gcve.eu Reference links https://www.au.com/information/notice_mobile/update/update-20170612-01/ http://www.securityfocus.com/bid/99282 http://jvn.jp/en/jp/JVN24348065/index.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2184`	vulnerable	2026-06-08 05:09:23.858577	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2183`	vulnerable	2026-06-08 05:09:23.852527	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.