CVE-2016-1137

High

Published: 30/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

There is an open redirect vulnerability in KDDI HOME SPOT CUBE devices before version 2 that allows remote attackers to redirect users to arbitrary websites.

Risk Assessment

This vulnerability can be exploited to conduct phishing attacks, posing a risk of data loss for users and damage to the organization's reputation.

Recommendation

It is recommended to update KDDI HOME SPOT CUBE devices to the latest version to mitigate this vulnerability.

Other vulnerabilities in KDDI HOME SPOT CUBE

CVE-2016-1139High
A cross-site request forgery (CSRF) vulnerability exists in KDDI HOME SPOT CUBE devices before version 2, allowing remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Original NVD description (English source)

Open redirect vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.