KDDI vulnerabilities
We track 6 vulnerabilities in KDDI products across 4 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on March 28, 2025.
Latest KDDI vulnerabilities
- 8.1 High severity
HGW-BL1500HM: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file deletion process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an attacker may d
- 8.8 High severity
HGW-BL1500HM: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file upload process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files
- 8.8 High severity
HGW BL1500HM: Use of Weak Credentials
HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may change the system settings.
- 9.8 Critical severity
HOME SPOT CUBE2: Out-of-bounds Write
Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. By processing invalid values, arbitrary code may be executed. Note that the affected products are no longer supported.
- 7.5 High severity
HOME SPOT CUBE2: Out-of-bounds Write
Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. Processing a specially crafted command may result in a denial of service (DoS) condition. Note that the affected products are no longer supported.
- 8.8 High severity
HOME SPOT CUBE2: Improper Neutralization of Special Elements used in an OS Command
HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of th