Lucene search
+L

776 matches found

BDU FSTEC
BDU FSTEC
•added 2024/02/09 12:00 a.m.•15 views

The vulnerability of the BUFFALO VR-S1000 router’s microprogramming software, related to the implementation or modification of arguments, allows a perpetrator to execute arbitrary code.

The vulnerability of the BUFFALO VR-S1000 router’s microprogramming software is related to the implementation or modification of arguments. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

7.8CVSS7.2AI score0.0025EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2024/01/29 9:15 p.m.•16 views

CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

7.2CVSS5.9AI score0.01769EPSS
SaveExploits1References1
NVD
NVD
•added 2024/01/29 9:15 p.m.•40 views

CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

7.2CVSS7.1AI score0.01769EPSS
SaveExploits1References1
Prion
Prion
•added 2024/01/29 9:15 p.m.•33 views

Command injection

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

5.8CVSS7.5AI score0.01769EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2024/01/29 12:00 a.m.•16 views

Buffalo LS210D Security Vulnerability

Buffalo LS210D is a hard disk drive from Buffalo Japan. A security vulnerability exists in the Buffalo LS210D version 1.78-0.03. A remote attacker can exploit this vulnerability to inject arbitrary commands into the NAS as root...

7.2CVSS7.1AI score0.01769EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/01/29 12:00 a.m.•16 views

PT-2024-13670 · Buffalo · Buffalo Ls210D

Name of the Vulnerable Software and Affected Versions: Buffalo LS210D version 1.78-0.03 Description: The issue allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root due to command injection in the ping utility. Recommendations: For Buffalo LS210D version...

7.2CVSS7.2AI score0.01769EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/01/29 12:00 a.m.•11 views

CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

7.1AI score0.01769EPSS
SaveExploits1References1
CVE
CVE
•added 2024/01/29 12:00 a.m.•62 views

CVE-2023-49038

CVE-2023-49038 affects Buffalo LS210D firmware 1.78-0.03. A command injection vulnerability exists in the ping utility that can be exploited by a remote authenticated attacker to run arbitrary commands as root on the NAS. The issue is network-based, with high impact to confidentiality, integrity,...

7.2CVSS7AI score0.01769EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/01/29 12:00 a.m.•46 views

CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

7.2AI score0.01769EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/29 12:00 a.m.•7 views

CVE-2023-49038: Improper Neutralization of Special Elements used in an OS Command

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

7.2CVSS6AI score0.01769EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2024/01/18 12:00 a.m.•16 views

The vulnerability of the microprogrammed software of the BUFFALO VR-S1000 routers, related to the use of pre-installed user credentials, allows a intruder to obtain access to the password of any user.

The vulnerability of the BUFFALO VR-S1000 router’s microprogramming software is related to the use of pre-set login credentials. Exploiting this vulnerability could allow a hacker to gain access to the password of any user...

4.9CVSS6AI score0.00231EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2024/01/11 3:15 a.m.•17 views

CVE-2023-51073

An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/updatenotifications.sh...

8.1CVSS6.1AI score0.01312EPSS
SaveExploits1References2
NVD
NVD
•added 2024/01/11 3:15 a.m.•36 views

CVE-2023-51073

An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/updatenotifications.sh...

8.1CVSS8.3AI score0.01312EPSS
SaveExploits1References2
Prion
Prion
•added 2024/01/11 3:15 a.m.•35 views

Design/Logic Flaw

An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/updatenotifications.sh...

5.1CVSS8.2AI score0.01312EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/11 12:00 a.m.•7 views

CVE-2023-51073

An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/updatenotifications.sh...

8.3AI score0.01312EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/11 12:00 a.m.•3 views

CVE-2023-51073: Undefined Security Weakness

An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/updatenotifications.sh...

8.1CVSS7.2AI score0.01312EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/01/11 12:00 a.m.•19 views

Buffalo LS210D Security Vulnerability

The Buffalo LS210D is a hard disk drive from Buffalo Japan. A security vulnerability exists in the Buffalo LS210D version v.1.78-0.03 that originates from a vulnerability that could allow a remote attacker to execute arbitrary code via the firmware update script in...

8.1CVSS7.7AI score0.01312EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/01/11 12:00 a.m.•49 views

CVE-2023-51073

An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/updatenotifications.sh...

8.5AI score0.01312EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/01/11 12:00 a.m.•22 views

PT-2024-14051 · Buffalo · Buffalo Ls210D

Name of the Vulnerable Software and Affected Versions: Buffalo LS210D version 1.78-0.03 Description: The issue allows a remote attacker to execute arbitrary code via the Firmware Update Script at "/etc/init.d/update notifications.sh". Recommendations: For Buffalo LS210D version 1.78-0.03, as a...

8.1CVSS8.3AI score0.01312EPSS
SaveExploits1References5
CVE
CVE
•added 2024/01/11 12:00 a.m.•85 views

CVE-2023-51073

CVE-2023-51073 affects Buffalo LS210D, firmware version 1.78-0.03, enabling an unauthenticated remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifications.sh. The issue is noted across multiple sources (NVD, Red Hat advisories, JVN) with a CVSS v3....

8.1CVSS8.3AI score0.01312EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder