← All advisories

Medium severity5.4NVD Advisory· Published Mar 24, 2018· Updated Jun 17, 2026

CVE-2017-17749

CVE-2017-17749

Description

Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora.

Affected products

3

Bose/Soundtouch2 versions
cpe:2.3:a:bose:soundtouch:-:*:*:*:*:android:*:*+ 1 more
- cpe:2.3:a:bose:soundtouch:-:*:*:*:*:android:*:*
- cpe:2.3:a:bose:soundtouch:-:*:*:*:*:iphone_os:*:*
Bose/Soundtouch 30llm-fuzzy

Patches

Vulnerability mechanics

References

1

aryanitin.com/2017-01-01-CVE-2017-17749/nvdExploitThird Party AdvisoryURL Repurposed

News mentions

0

No linked articles in our index yet.