Skip to main content

Blynk

5 CVEs vendor

Monthly

CVE-2022-29496 Jun 17, 18:15 CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the BlynkConsole.h runCommand functionality of Blynk -Library v1.0.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Blynk Library Blynk
NVD
CVSS 3.1
9.8
EPSS
1.9%
CVE-2019-5065 Sep 05, 17:15 MEDIUM POC This Month

An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Information Disclosure Blynk Library Blynk
NVD
CVSS 3.1
5.3
EPSS
1.9%
CVE-2018-17785 Sep 30, 15:29 Maven HIGH POC PATCH This Week

In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as demonstrated by reading the /etc/passwd file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Blynk Server Blynk
NVD GitHub
CVSS 3.0
7.5
EPSS
2.1%
CVE-2014-7019 Oct 16, 19:55 MEDIUM This Month

The Clarks Inn (aka com.ClarksInn) application 3.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Information Disclosure Google Clarks Inn Blynk
NVD
CVSS 2.0
5.4
EPSS
0.1%
CVE-2014-6969 Oct 16, 19:55 MEDIUM This Month

The Deltin Suites (aka com.DeltinSuites) application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Information Disclosure Google Deltin Suites Blynk
NVD
CVSS 2.0
5.4
EPSS
0.1%
EPSS 2% CVSS 9.8
CRITICAL POC Act Now

A stack-based buffer overflow vulnerability exists in the BlynkConsole.h runCommand functionality of Blynk -Library v1.0.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Blynk Library +1
NVD
EPSS 2% CVSS 5.3
MEDIUM POC This Month

An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Information Disclosure Blynk Library +1
NVD
EPSS 2% CVSS 7.5
HIGH POC PATCH This Week

In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as demonstrated by reading the /etc/passwd file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Blynk Server Blynk
NVD GitHub
EPSS 0% CVSS 5.4
MEDIUM This Month

The Clarks Inn (aka com.ClarksInn) application 3.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive. Rated medium severity (CVSS 5.4). No vendor patch available.

Information Disclosure Google Clarks Inn +1
NVD
EPSS 0% CVSS 5.4
MEDIUM This Month

The Deltin Suites (aka com.DeltinSuites) application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Information Disclosure Google Deltin Suites +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy