CVE-2024-23486

Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials...

CVE-2024-23486

Buffalo BUFFALO wireless LAN routers are affected by CVE-2024-23486 due to plaintext storage of passwords, enabling a network-adjacent, unauthenticated attacker with access to the login page to obtain configured credentials. The issue is documented for multiple WSR-series models (e.g., WSR-... va...

CVE-2024-23486

Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials...

Multiple vulnerabilities in BUFFALO wireless LAN routers

Overview Multiple wireless LAN routers provided by BUFFALO INC. contain multiple vulnerabilities listed below. Plaintext storage of a password CWE-256 OS Command Injection CWE-78 Satoru Nagaoka of Cyber Defense Institute, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the...

BUFFALO wireless LAN routers 安全漏洞

Buffalo BUFFALO wireless LAN routers are a series of routers from Buffalo, Japan. A security vulnerability exists in BUFFALO wireless LAN, which arises from passwords being stored in clear text. An attacker could exploit the vulnerability to gain access to the product's login page to obtain...

PT-2024-21282 · Buffalo · Buffalo Wireless Lan Routers

Name of the Vulnerable Software and Affected Versions: BUFFALO wireless LAN routers affected versions not specified Description: The issue allows a logged-in user to execute arbitrary OS commands, which is an OS command injection vulnerability in BUFFALO wireless LAN routers. Recommendations: At...

JVN#58236836: Multiple vulnerabilities in BUFFALO wireless LAN routers

Multiple wireless LAN routers provided by BUFFALO INC. contain multiple vulnerabilities listed below. Plaintext storage of a password CWE-256 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Base Score 6.5 CVE-2024-23486 OS Command Injection CWE-78 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Base...

PT-2024-19894 · Buffalo · Buffalo Wireless Lan Routers

Name of the Vulnerable Software and Affected Versions: BUFFALO wireless LAN routers affected versions not specified Description: A plaintext storage of a password issue exists, which may allow a network-adjacent unauthenticated attacker with access to the product's login page to obtain configured...

Buffalo wireless LAN routers 安全漏洞

Buffalo wireless LAN routers is a series of routers from Buffalo Japan. A security vulnerability exists in Buffalo wireless LAN routers. An attacker could exploit the vulnerability to execute arbitrary operating system commands...

The vulnerability of the microprogrammed software of the BUFFALO VR-S1000 routers lies in the lack of measures to neutralize the special elements used in the operating system’s command set. This allows a perpetrator to execute arbitrary commands of the operating system.

The vulnerability of the Cacti network monitoring software is related to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the pollers.php script...

The vulnerability of the BUFFALO VR-S1000 router’s microprogramming software, related to the implementation or modification of arguments, allows a perpetrator to execute arbitrary code.

The vulnerability of the BUFFALO VR-S1000 router’s microprogramming software is related to the implementation or modification of arguments. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

Command injection

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

Buffalo LS210D Security Vulnerability

Buffalo LS210D is a hard disk drive from Buffalo Japan. A security vulnerability exists in the Buffalo LS210D version 1.78-0.03. A remote attacker can exploit this vulnerability to inject arbitrary commands into the NAS as root...

PT-2024-13670 · Buffalo · Buffalo Ls210D

Name of the Vulnerable Software and Affected Versions: Buffalo LS210D version 1.78-0.03 Description: The issue allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root due to command injection in the ping utility. Recommendations: For Buffalo LS210D version...

CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

CVE-2023-49038

CVE-2023-49038 affects Buffalo LS210D firmware 1.78-0.03. A command injection vulnerability exists in the ping utility that can be exploited by a remote authenticated attacker to run arbitrary commands as root on the NAS. The issue is network-based, with high impact to confidentiality, integrity,...

The vulnerability of the microprogrammed software of the BUFFALO VR-S1000 routers, related to the use of pre-installed user credentials, allows a intruder to obtain access to the password of any user.

The vulnerability of the BUFFALO VR-S1000 router’s microprogramming software is related to the use of pre-set login credentials. Exploiting this vulnerability could allow a hacker to gain access to the password of any user...