What’s Vulnerable › Vulnerabilities
CVE-2017-6520
- Severity: critical (CVSS 9.1 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-05-01 · updated 2026-06-17
- Weakness: CWE-417
Description
The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets.
Affected products
- Bose Soundtouch 30: all versions
References
Get alerted when CVE-2017-6520 or the next vulnerability affects your stack