PatchTheCVEstarry vulnerabilities
Recent CVEs affecting starry products. 2 tracked.
starry has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-06-10. Highest priority: CVE-2017-13717 (score 57/100).
- CVE-2017-13718 HIGH 8.0 MITIGATE The HTTP API supported by Starry Station (aka Starry Router) allows brute forcing the PIN setup by the user on
- CVE-2017-13717 HIGH 8.8 MITIGATE Starry Station (aka Starry Router) sets the Access-Control-Allow-Origin header to "*"
FAQ
How do I fix starry vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is starry being exploited right now?
None of the tracked starry CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which starry CVE should I patch first?
CVE-2017-13717 currently ranks highest (57/100): Starry Station (aka Starry Router) sets the Access-Control-Allow-Origin header to "*".