Lucene search

K
cveMitreCVE-2023-51073
HistoryJan 11, 2024 - 3:15 a.m.

CVE-2023-51073

2024-01-1103:15:10
mitre
web.nvd.nist.gov
20
cve-2023-51073
buffalo ls210d
remote code execution
firmware update script

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

66.3%

An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifications.sh.

Affected configurations

Nvd
Node
buffalols210dMatch-
AND
buffalols210d_firmwareMatch1.78-0.03
VendorProductVersionCPE
buffalols210d-cpe:2.3:h:buffalo:ls210d:-:*:*:*:*:*:*:*
buffalols210d_firmware1.78-0.03cpe:2.3:o:buffalo:ls210d_firmware:1.78-0.03:*:*:*:*:*:*:*

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

66.3%

Related for CVE-2023-51073