Design/Logic Flaw

2023-12-2608:15:00

PRIOn knowledge base

www.prio-n.com

vr-s1000

firmware

design flaw

arbitrary commands

web management

7.9 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.7%

VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product’s web management page to execute arbitrary OS commands.

CPENameOperatorVersion
vr-s1000_firmwarele2.37

CPE	Name	Operator	Version
	vr-s1000_firmware	le	2.37

References

jvn.jp/en/jp/JVN23771490/

www.buffalo.jp/news/detail/20231225-01.html