Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2017-07-07	CVE-2017-2185	OS Command Injection vulnerability in Kddi Home Spot Cube 2 Firmware V100/V101 HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI. low complexity kddi CWE-78	5.2
2017-07-07	CVE-2017-2184	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Kddi Home Spot Cube 2 Firmware V100/V101 Buffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute arbitrary code via WebUI. low complexity kddi CWE-119	5.8
2017-07-07	CVE-2017-2183	OS Command Injection vulnerability in Kddi Home Spot Cube 2 Firmware V100/V101 HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings. low complexity kddi CWE-78	5.2