CVE-2021-40527
Published Oct 25, 2021Exposure of senstive information to an unauthorised actor in the "com.onepeloton.erlich" mobile application up to and including version 1.7.22 allows a remote attacker to access d…
Vendor archive
onepeloton CVEs
Beta · best-effort3 CVEs tagged to vendor onepeloton — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2021-40526
Published Oct 25, 2021Incorrect calculation of buffer size vulnerability in Peleton TTR01 up to and including PTV55G allows a remote attacker to trigger a Denial of Service attack through the GymKit da…
CVE-2021-33887
Published Jun 15, 2021Insufficient verification of data authenticity in Peloton TTR01 up to and including PTV55G allows an attacker with physical access to boot into a modified kernel/ramdisk without u…
Showing 1-3 of 3 CVEsPage 1 of 1