Roku

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-27152 Apr 08, 18:15 MEDIUM This Month

Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification. Rated medium severity (CVSS 5.7), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Roku Os Roku

NVD GitHub

CVSS 3.1

5.7

EPSS

0.3%

CVE-2018-11314 Jul 03, 16:29 CRITICAL Act Now

The External Control API in Roku and Roku TV products allow unauthorized access via a DNS Rebind attack. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Roku Firmware Roku

NVD

CVSS 3.0

9.6

EPSS

1.7%

CVE-2022-27152

EPSS 0% CVSS 5.7

MEDIUM This Month

Information Disclosure Roku Os Roku

NVD GitHub

CVE-2018-11314

EPSS 2% CVSS 9.6

CRITICAL Act Now

Authentication Bypass Roku Firmware Roku

NVD