PatchTheCVEonepeloton vulnerabilities
Recent CVEs affecting onepeloton products. 3 tracked.
onepeloton has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-10-25. Highest priority: CVE-2021-40527 (score 48/100).
- CVE-2021-40527 HIGH 8.6 UPGRADE Exposure of senstive information to an unauthorised actor in the "com.onepeloton.erlich" mobile application up
- CVE-2021-40526 MEDIUM 4.8 UPGRADE Incorrect calculation of buffer size vulnerability in Peleton TTR01 up to and including PTV55G allows a remote
- CVE-2021-33887 MEDIUM 6.8 UPGRADE Insufficient verification of data authenticity in Peloton TTR01 up to and including PTV55G allows an attacker
FAQ
How do I fix onepeloton vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is onepeloton being exploited right now?
None of the tracked onepeloton CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which onepeloton CVE should I patch first?
CVE-2021-40527 currently ranks highest (48/100): Exposure of senstive information to an unauthorised actor in the "com.onepeloton.erlich" mobile application up.