Lucene search

K
nvd[email protected]NVD:CVE-2023-51073
HistoryJan 11, 2024 - 3:15 a.m.

CVE-2023-51073

2024-01-1103:15:10
web.nvd.nist.gov
3
buffalo
ls210d
firmware
remote code execution

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

66.3%

An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifications.sh.

Affected configurations

Nvd
Node
buffalols210dMatch-
AND
buffalols210d_firmwareMatch1.78-0.03
VendorProductVersionCPE
buffalols210d-cpe:2.3:h:buffalo:ls210d:-:*:*:*:*:*:*:*
buffalols210d_firmware1.78-0.03cpe:2.3:o:buffalo:ls210d_firmware:1.78-0.03:*:*:*:*:*:*:*

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

66.3%

Related for NVD:CVE-2023-51073