Lucene search

[email protected]CVE-2014-9284

HistoryJun 09, 2015 - 12:59 a.m.

CVE-2014-9284

2015-06-0900:59:00

CWE-78

[email protected]

web.nvd.nist.gov

buffalo

router

remote authentication

os command execution

vulnerability

cve-2014-9284

7.4 High

AI Score

Confidence

Low

7.7 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

45.3%

JSON

The Buffalo WHR-1166DHP 1.60 and earlier, WSR-600DHP 1.60 and earlier, WHR-600D 1.60 and earlier, WHR-300HP2 1.60 and earlier, WMR-300 1.60 and earlier, WEX-300 1.60 and earlier, and BHR-4GRV2 1.04 and earlier routers allow remote authenticated users to execute arbitrary OS commands via unspecified vectors.

CPENameOperatorVersion
buffalotech:wsr-600dhp_firmwarebuffalotech wsr-600dhp firmwarele1.60
buffalotech:whr-300hp2_firmwarebuffalotech whr-300hp2 firmwarele1.60
buffalotech:whr-1166dhp_firmwarebuffalotech whr-1166dhp firmwarele1.60
buffalotech:bhr-4grv2_firmwarebuffalotech bhr-4grv2 firmwarele1.04
buffalotech:wmr-300_firmwarebuffalotech wmr-300 firmwarele1.60
buffalotech:wex-300_firmwarebuffalotech wex-300 firmwarele1.60
buffalotech:whr-600d_firmwarebuffalotech whr-600d firmwarele1.60

CPE	Name	Operator	Version
buffalotech:wsr-600dhp_firmware	buffalotech wsr-600dhp firmware	le	1.60
buffalotech:whr-300hp2_firmware	buffalotech whr-300hp2 firmware	le	1.60
buffalotech:whr-1166dhp_firmware	buffalotech whr-1166dhp firmware	le	1.60
buffalotech:bhr-4grv2_firmware	buffalotech bhr-4grv2 firmware	le	1.04
buffalotech:wmr-300_firmware	buffalotech wmr-300 firmware	le	1.60
buffalotech:wex-300_firmware	buffalotech wex-300 firmware	le	1.60
buffalotech:whr-600d_firmware	buffalotech whr-600d firmware	le	1.60

References

jvn.jp/en/jp/JVN50447904/index.html

jvndb.jvn.jp/jvndb/JVNDB-2015-000085

7.4 High

AI Score

Confidence

Low

7.7 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

45.3%

JSON

Related for CVE-2014-9284

prion1 cvelist1 jvn1