Design/Logic Flaw

2023-12-2608:15:00

PRIOn knowledge base

www.prio-n.com

logic flaw

argument injection

vulnerability

vr-s1000 firmware

arbitrary command

7.5 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Improper neutralization of argument delimiters in a command (‘Argument Injection’) vulnerability in VR-S1000 firmware Ver. 2.37 and earlier allows an authenticated attacker who can access to the product’s command line interface to execute an arbitrary command.

CPENameOperatorVersion
vr-s1000_firmwarele2.37

CPE	Name	Operator	Version
	vr-s1000_firmware	le	2.37

References

jvn.jp/en/jp/JVN23771490/

www.buffalo.jp/news/detail/20231225-01.html