Known Vulnerabilities for products from Kddi
Listed below are 17 of the newest known vulnerabilities associated with the vendor "Kddi".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by Kddi can be found at device.report : Kddi
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-41281 json | Not Provided | 2026-05-14 | 2026-05-14 | |
| CVE-2022-43543 json | KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handling of ... | 5.4 - MEDIUM | 2022-12-21 | 2023-01-04 |
| CVE-2022-33948 json | HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP ser... | 8.8 - HIGH | 2022-07-04 | 2022-07-15 |
| CVE-2019-6005 json | Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operati... | 9.8 - CRITICAL | 2019-09-12 | 2020-08-24 |
| CVE-2018-0691 json | Multiple +Message Apps (Softbank +Message App for Android prior to version 10.1.7, Softbank +Message App for iOS prior to ver... | 5.9 - MEDIUM | 2018-11-15 | 2019-02-04 |
| CVE-2018-0517 json | Untrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and earlier allows an attacker to ga... | 7.8 - HIGH | 2018-02-08 | 2018-03-10 |
| CVE-2017-2289 json | Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an attacke... | 7.8 - HIGH | 2017-08-18 | 2017-08-22 |
| CVE-2017-2186 json | HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to bypass authentication to load malicious firmware via WebUI. | Not Provided | 2017-07-07 | 2025-04-20 |
| CVE-2017-2185 json | HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI. | Not Provided | 2017-07-07 | 2025-04-20 |
| CVE-2017-2184 json | Buffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute arbitrary code via WebUI. | Not Provided | 2017-07-07 | 2025-04-20 |
| CVE-2017-2183 json | HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings. | Not Provided | 2017-07-07 | 2025-04-20 |
| CVE-2016-1141 json | KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vector... | Not Provided | 2016-01-30 | 2026-05-06 |
| CVE-2016-1140 json | KDDI HOME SPOT CUBE devices before 2 allow remote attackers to conduct clickjacking attacks via unspecified vectors. | Not Provided | 2016-01-30 | 2026-05-06 |
| CVE-2016-1139 json | Cross-site request forgery (CSRF) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hijack the... | Not Provided | 2016-01-30 | 2026-05-06 |
| CVE-2016-1138 json | CRLF injection vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to inject arbitrary HTTP headers... | Not Provided | 2016-01-30 | 2026-05-06 |
| CVE-2016-1137 json | Open redirect vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to redirect users to arbitrary we... | Not Provided | 2016-01-30 | 2026-05-06 |
| CVE-2016-1136 json | Cross-site scripting (XSS) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote authenticated users to inject ... | Not Provided | 2016-01-30 | 2026-05-06 |
| CVE-2007-3692 json | Directory traversal vulnerability in download.cgi in EZFactory KDDI Download CGI 1.x allows remote attackers to read and down... | Not Provided | 2007-07-11 | 2026-04-23 |
Known software with vulnerabilities from Kddi
| Type | Vendor | Product | Version |
|---|---|---|---|
| Hardware | Kddi | Home Spot Cube | - |
| Hardware | Kddi | Home Spot Cube 2 | - |
| Operating System | Kddi | Home Spot Cube 2 Firmware | v100 |
| Operating System | Kddi | Home Spot Cube Firmware | 2.0 |
| Application | Kddi | Message | 1.0.3 |