CVE-2023-49038

2024-01-2900:00:00

mitre

www.cve.org

command injection

buffalo ls210d

remote attacker

arbitrary commands

root access

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

39.3%

JSON

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root.

References

github.com/christopher-pace/CVE-2023-49038