Critical severity9.6NVD Advisory· Published Jul 3, 2018· Updated Jun 17, 2026

CVE-2018-11314

Description

The External Control API in Roku and Roku TV products allow unauthorized access via a DNS Rebind attack. This can result in remote device control and privileged device and network information to be exfiltrated by an attacker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Roku/Roku TVllm-fuzzy

Patches

Vulnerability mechanics

References

www.wired.com/story/chromecast-roku-sonos-dns-rebinding-vulnerabilitynvdPress/Media CoverageThird Party Advisory
medium.com/%40brannondorsey/attacking-private-networks-from-the-internet-with-dns-rebinding-ea7098a2d325nvd
support.roku.com/article/12554388937879nvd

News mentions

No linked articles in our index yet.

cvss	0.624
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000