CVE-2023-6181 is a critical vulnerability affecting Google Chromecast and its firmware, stemming from an oversight in its Boot Control Block (BCB) handling of reboot reasons. This flaw allows for persistent code execution, posing a significant risk due to its CVSS score of 9.8 (CRITICAL), indicating a network-exploitable vulnerability with low attack complexity and high impact on confidentiality, integrity, and availability. While not currently listed in CISA's KEV catalog, the vulnerability has garnered some community discussion and media coverage, including reports of its exploitation at a hacking contest, though public exploit code is not readily available.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2023-10-01CPE matchmatch criteria | cpe:2.3:o:google:chromecast_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.