Information disclosure

2023-12-2608:15:00

PRIOn knowledge base

www.prio-n.com

vr-s1000

firmware

v2.37

unauthenticated access

sensitive data

web management

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.1%

JSON

VR-S1000 firmware Ver. 2.37 and earlier allows a network-adjacent unauthenticated attacker who can access the product’s web management page to obtain sensitive information.

CPENameOperatorVersion
vr-s1000_firmwarele2.37

CPE	Name	Operator	Version
	vr-s1000_firmware	le	2.37

References

jvn.jp/en/jp/JVN23771490/

www.buffalo.jp/news/detail/20231225-01.html