CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

CVE-2023-49038

CVE-2023-49038 affects Buffalo LS210D firmware 1.78-0.03. A command injection vulnerability exists in the ping utility that can be exploited by a remote authenticated attacker to run arbitrary commands as root on the NAS. The issue is network-based, with high impact to confidentiality, integrity,...