Buffalo WZR-1750DHP2 Arbitrary Command Execution Vulnerability

The Buffalo WZR-1750DHP2 is a router product from the Buffalo Group of Japan. A security vulnerability exists in the Buffalo WZR-1750DHP2 version 2.30 and earlier. An attacker can exploit the vulnerability to execute arbitrary operating system commands...

Buffer overflow

Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file...

CVE-2018-0554

Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors...

CVE-2018-0556

Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0555

Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file...

CVE-2018-0556

Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0555

Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file...

Authentication flaw

Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors...

Design/Logic Flaw

Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0554

Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors...

CVE-2018-0554

Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors...

CVE-2018-0555

Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file...

CVE-2018-0554

Buffalo WZR-1750DHP2 (firmware 2.30 and earlier) is affected by CVE-2018-0554: a missing-authentication vulnerability that allows an attacker on adjacent network to bypass auth and execute arbitrary commands. The issue is listed alongside related vulnerabilities (CVE-2018-0555, CVE-2018-0556) aff...

CVE-2018-0556

Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0555

CVE-2018-0555 affects Buffalo WZR-1750DHP2 firmware (including Ver.2.30 and earlier). The vulnerability is a buffer overflow in processing a specially crafted file, enabling an attacker to execute arbitrary code on the device. Related sources (NVD, CNVD, JVN/OpenVAS) corroborate the affected prod...

CVE-2018-0556

CVE-2018-0556 affects Buffalo WZR-1750DHP2 firmware versions 2.30 and earlier. The vulnerability is an OS Command Injection (CWE-78) in the device’s firmware that allows an attacker with network access to execute arbitrary commands on the router. Root cause involves inadequate input handling enab...

CVE-2018-0555: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file...

CVE-2018-0554: Missing Authentication for Critical Function

Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors...

CVE-2018-0556: Improper Neutralization of Special Elements used in an OS Command

Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...

buffalo-technology.com XSS vulnerability

Open Bug Bounty ID: OBB-580871 Description| Value ---|--- Affected Website:| buffalo-technology.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...