JVN#50447904: Multiple Buffalo wireless LAN routers vulnerable to OS command injection

Multiple wireless LAN routers provided by BUFFALO INC. contain an OS command injection vulnerability. Impact An authenticated attacker may be able to execute arbitrary OS commands. Solution Update the Firmware Apply the appropriate firmware update provided by the developer. Products Affected...

Buffalo NAS Login Utility

This module simply attempts to login to a Buffalo NAS instance using a specific username and password. It has been confirmed to work on version 1.68 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require...

Buffalo WZR-HP-G300NH2 - CSRF Vulnerability

No description provided by source. Exploit Title: Buffalo WZR-HP-G300NH2 CSRF Vulnerability Author: Prayas Kulshrestha E-mail: [email protected] Category: Hardware Google Dork: N/A Date: 06/10/2013 Vendor: http://www.buffalotech.com Model: WZR-HP-G300NH2 Firmware Version: DD-WRT...

Buffalo TeraStation TS-Series - Multiple Vulnerabilities

No description provided by source. Title: Buffalo TeraStation TS-Series multiple vulnerabilities Version affected: firmware version = 1.5.7 Vendor: http://www.buffalotech.com/products/network-storage Discovered by: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it...

Buffalo WZR-HP-G300NH2 - Cross-Site Request Forgery

Buffalo WZR-HP-G300NH2 - Cross-Site Request Forgery Exploit Title: Buffalo WZR-HP-G300NH2 CSRF Vulnerability Author: Prayas Kulshrestha E-mail: [email protected] Category: Hardware Google Dork: N/A Date: 06/10/2013 Vendor: http://www.buffalotech.com Model: WZR-HP-G300NH2 Firmware Versio...

Buffalo WZR-HP-G300NH2 - Cross-Site Request Forgery

Exploit Title: Buffalo WZR-HP-G300NH2 CSRF Vulnerability Author: Prayas Kulshrestha E-mail: [email protected] Category: Hardware Google Dork: N/A Date: 06/10/2013 Vendor: http://www.buffalotech.com Model: WZR-HP-G300NH2 Firmware Version: DD-WRT v24SP2-MULTI 10/31/11 std - build 17798...

Buffalo WZR-HP-G300NH2 Cross Site Request Forgery

Exploit Title: Buffalo WZR-HP-G300NH2 CSRF Vulnerability Author: Prayas Kulshrestha E-mail: [email protected] Category: Hardware Google Dork: N/A Date: 06/10/2013 Vendor: http://www.buffalotech.com Model: WZR-HP-G300NH2 Firmware Version: DD-WRT v24SP2-MULTI 10/31/11 std - build 17798...

Buffalo WZR-HP-G300NH2 Cross Site Request Forgery Vulnerability

Buffalo WZR-HP-G300NH2 suffers from a cross site request forgery vulnerability. The demonstration payload changes the administrative password. Exploit Title: Buffalo WZR-HP-G300NH2 CSRF Vulnerability Author: Prayas Kulshrestha E-mail: email protected Category: Hardware Google Dork: N/A Date:...

Buffalo LinkStation Direct Request Remote File Disclosure

The web server included with the remote Buffalo LinkStation device does not properly configure access rights, which allows an unauthenticated remote attacker to gain access to sensitive files such as the device's private RSA key. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Buffalo LinkStation Detection

The remote host is a Buffalo LinkStation device, a NAS storage device with an embedded web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64914; scriptversion"1.7"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"Buffalo LinkStation Detection";...

Buffalo TeraStation TS-Series multiple vulnerabilities

Title: Buffalo TeraStation TS-Series multiple vulnerabilities Version affected: firmware version = 1.5.7 Vendor: http://www.buffalotech.com/products/network-storage Discovered by: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: unpatched...

Buffalo TeraStation security vulnerabilities

Code execution, information leakage...

Buffalo TeraStation TS-Series - Multiple Vulnerabilities

Title: Buffalo TeraStation TS-Series multiple vulnerabilities Version affected: firmware version = 1.5.7 Vendor: http://www.buffalotech.com/products/network-storage Discovered by: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: unpatched...

Buffalo TeraStation Multiple Security Vulnerabilities (Jan 2013)

Buffalo TeraStation is prone to an arbitrary file download and an arbitrary command-injection vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

Buffalo TeraStation TS-Series - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Title: Buffalo TeraStation TS-Series multiple vulnerabilities Version affected: firmware version = 1.5.7 Vendor: http://www.buffalotech.com/products/network-storage Discovered by: Andrea Fabrizi Email: andrea.fabrizi gmail com Web:...

Buffalo TeraStation TS-Series Command Execution

Title: Buffalo TeraStation TS-Series multiple vulnerabilities Version affected: firmware version = 1.5.7 Vendor: http://www.buffalotech.com/products/network-storage Discovered by: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: unpatched...

Buffalo Linkstation Privilege Escalation Vulnerability

Buffalo Linkstation and various other Buffalo products suffer from a privilege escalation vulnerability where a permanent guest account can be used to change the administrative password. Product. Linkstation & Others Platform. Buffalo Technology Affected versions. Including Actual Version Severit...

Buffalo Linkstation Privilege Escalation

Release Date. 5-Dec-2012 Last Update. - Vendor Notification Date. - Product. Linkstation & Others Platform. Buffalo Technology Affected versions. Including Actual Version Severity Rating. High Impact. Admin Password Reset Attack Vector. From remote Solution Status. Don't use Buffalo CVE reference...

Buffalo Linkstation Privilege Escalation / Information Disclosure Vulnerabilities

Buffalo Linkstation suffers from information disclosure and privilege escalation vulnerabilities. Product. Linkstation & Others Platform. Buffalo Technology Affected versions. Including Actual Version Severity Rating. Medium Impact. Privilege escalation, Information Disclosure Attack Vector. From...

Buffalo Linkstation Privilege Escalation / Information Disclosure (Dec 2012)

Buffalo Linkstation devices suffer from information disclosure and privilege escalation vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...