CVE-2018-0521

Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors...

Authentication flaw

Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors...

CVE-2018-0522

Buffer overflow in Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary code via a specially crafted file...

CVE-2018-0523

Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0522

Buffer overflow in Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary code via a specially crafted file...

CVE-2018-0523

CVE-2018-0523 affects Buffalo WXR-1900DHP2 firmware 2.48 and earlier. The OS Command Injection vulnerability (CWE-78) can allow an attacker on a device-connected network to execute arbitrary OS commands via unspecified vectors. Public sources (JVN/NVD) list this CVE with associated CVSS metrics (...

CVE-2018-0522

CVE-2018-0522 affects Buffalo WXR-1900DHP2 firmware versions 2.48 and earlier. The vulnerability is a buffer overflow in the device’s handling of a specially crafted file, allowing an attacker to execute arbitrary code on the router. Documents indicate the impact can include code execution when a...

CVE-2018-0521

The CVE-2018-0521 issue affects Buffalo WXR-1900DHP2 firmware versions 2.48 and earlier. The vulnerability is a Missing Authentication for Critical Function (CWE-306) that allows an attacker on the connected network to bypass authentication and execute arbitrary commands on the device via unspeci...

CVE-2018-0521

Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors...

Buffalo Terastation Server detection.

Binary data 700221.prm...

BUFFALO WXR-1900DHP2 OS Command Injection Vulnerability

The BUFFALO WXR-1900DHP2 is a wireless router from BUFFALO Japan. An OS command injection vulnerability exists in the BUFFALO WXR-1900DHP2 Ver.2.48 and earlier firmware versions, which can be exploited by an attacker to execute arbitrary commands on an affected network device...

Buffalo Terastation server detection.

Binary data 700222.prm...

BUFFALO WXR-1900DHP2 Buffer Overflow Vulnerability

The BUFFALO WXR-1900DHP2 is a wireless router from BUFFALO Japan. A buffer overflow vulnerability exists in the BUFFALO WXR-1900DHP2 Ver.2.48 and earlier firmware versions, which can be exploited by an attacker to execute arbitrary code by accessing a malicious file...

BUFFALO WXR-1900DHP2 Authentication Vulnerability

The BUFFALO WXR-1900DHP2 is a wireless router from BUFFALO Japan. An authentication vulnerability exists in the BUFFALO WXR-1900DHP2 Ver.2.48 and earlier firmware versions, which can be exploited by an attacker to execute arbitrary commands on an affected network device...

JVN#97144273: Multiple vulnerabilities in WXR-1900DHP2

WXR-1900DHP2 provided by BUFFALO INC. is a wireless LAN router. WXR-1900DHP2 contains multiple vulnerabilities listed below. Missing Authentication for Critical Function CWE-306 - CVE-2018-0521 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H| Base Score:...

buffalo-theatre.com XSS vulnerability

Open Bug Bounty ID: OBB-483798 Description| Value ---|--- Affected Website:| buffalo-theatre.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

Buffalo BBR-4HG and BBR-4MG Denial of Service Vulnerabilities

The Buffalo BBR-4HG and BBR-4MG are both broadband router products from the Buffalo Group of Japan. An input validation vulnerability exists in the Buffalo BBR-4HG and BBR-4MG broadband routers using firmware versions 1.00 through 1.48 and 2.00 through 2.07. An attacker could exploit the...

Buffalo BBR-4HG and BBR-4MG Cross-Site Scripting Vulnerabilities

The Buffalo BBR-4HG and BBR-4MG are both broadband router products from the Buffalo Group of Japan. A cross-site scripting vulnerability exists in the Buffalo BBR-4HG and BBR-4MG broadband routers using firmware versions 1.00 through 1.48 and 2.00 through 2.07. A remote attacker could exploit thi...

Input validation

Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...