Every CVE Search/ Get API key

CVE-2017-2183

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS...

8.0 High

CVE-2017-2183 is a high vulnerability (CVSS 8.0) in Kddi Corporation Home Spot Cube2, published July 7, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.85%, the 58th percentile. No source names a fixed version.

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.85%Unchanged since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 8.0

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings.

Record
CVE-2017-2183
CVSS 3.0
8.0 HighCVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
5.2 MediumAV:A/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-78
Updated
2026-11-02
CVE List No score

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings.

Record
CVE-2017-2183
Updated
2026-11-02
EUVDEUVD-2017-11366 No score

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings.

Record
EUVD-2017-11366
Updated
2026-11-03
GitHub AdvisoriesGHSA-v6xm-gcvx-99rx 8.0

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS...

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings.

Record
GHSA-v6xm-gcvx-99rx
CVSS 3.0
8.0 HighCVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02

Affected products

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD

References

MoveEnter Open