Buffalo BBR-4HG and BBR-4MG Denial of Service Vulnerabilities

The Buffalo BBR-4HG and BBR-4MG are both broadband router products from the Buffalo Group of Japan. An input validation vulnerability exists in the Buffalo BBR-4HG and BBR-4MG broadband routers using firmware versions 1.00 through 1.48 and 2.00 through 2.07. An attacker could exploit the...

Input validation

Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors...

CVE-2017-10897

Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors...

CVE-2017-10896

Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-10896

Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-10897

Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors...

CVE-2017-10897

The CVE-2017-10897 vulnerability affects Buffalo BBR-4HG and BBR-4MG broadband routers, where an input validation issue in firmware versions 1.00–1.48 and 2.00–2.07 can cause the device to become unresponsive via unspecified vectors. The root cause is improper input validation on the administrati...

CVE-2017-10896

Buffalo BBR-4HG and BBR-4MG broadband routers (firmware 1.00–1.48 and 2.00–2.07) are affected by CVE-2017-10896, a Cross-site Scripting (CWE-79) vulnerability. The flaw allows an attacker to inject arbitrary web script or HTML into the management/web UI via unspecified vectors, potentially execut...

PT-2017-11591

Name of the Vulnerable Software and Affected Versions Buffalo BBR-4HG and BBR-4MG versions 1.00 through 1.48 Buffalo BBR-4HG and BBR-4MG versions 2.00 through 2.07 Description The issue is related to input validation, allowing an attacker to cause the device to become unresponsive. The exact...

CVE-2017-10897: Improper Input Validation

Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors...

CVE-2017-10896: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

PT-2017-11590

Name of the Vulnerable Software and Affected Versions Buffalo BBR-4HG and BBR-4MG versions 1.00 through 1.48 Buffalo BBR-4HG and BBR-4MG versions 2.00 through 2.07 Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

JVN#65994435: Multiple vulnerabilities in multiple Buffalo broadband routers

BBR-4HG and BBR-4MG provided by BUFFALO INC. are wireless LAN routers. BBR-4HG and BBR-4MG contain multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2017-10896 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...