Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 4:24 a.m.11 views

CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

7.2CVSS7.3AI score0.01769EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/23 2:18 a.m.10 views

CVE-2023-51073

An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/updatenotifications.sh...

8.1CVSS7.9AI score0.01312EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2024/05/17 12:0 a.m.27 views

Buffalo LS210D < 1.82 Multiple Vulnerabilities

Buffalo LS210D is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:buffalo:ls210dfirmware"; if...

8.1CVSS7.1AI score0.02561EPSS
Exploits1References2
NVD
NVD
added 2024/01/29 9:15 p.m.25 views

CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

7.2CVSS7.1AI score0.01769EPSS
Exploits1References1
OSV
OSV
added 2024/01/29 9:15 p.m.2 views

CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

7.2CVSS5.9AI score0.01769EPSS
Exploits1References1
Prion
Prion
added 2024/01/29 9:15 p.m.22 views

Command injection

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

5.8CVSS7.5AI score0.01769EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/01/29 12:0 a.m.23 views

CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

7.2AI score0.01769EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/01/29 12:0 a.m.4 views

Buffalo LS210D Security Vulnerability

Buffalo LS210D is a hard disk drive from Buffalo Japan. A security vulnerability exists in the Buffalo LS210D version 1.78-0.03. A remote attacker can exploit this vulnerability to inject arbitrary commands into the NAS as root...

7.2CVSS7.1AI score0.01769EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/01/29 12:0 a.m.5 views

CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

7.1AI score0.01769EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/01/29 12:0 a.m.4 views

PT-2024-13670 · Buffalo · Buffalo Ls210D

Name of the Vulnerable Software and Affected Versions: Buffalo LS210D version 1.78-0.03 Description: The issue allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root due to command injection in the ping utility. Recommendations: For Buffalo LS210D version...

7.2CVSS7.2AI score0.01769EPSS
Exploits1References5
CVE
CVE
added 2024/01/29 12:0 a.m.39 views

CVE-2023-49038

CVE-2023-49038 affects Buffalo LS210D firmware 1.78-0.03. A command injection vulnerability exists in the ping utility that can be exploited by a remote authenticated attacker to run arbitrary commands as root on the NAS. The issue is network-based, with high impact to confidentiality, integrity,...

7.2CVSS7AI score0.01769EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2024/01/11 3:15 a.m.21 views

CVE-2023-51073

An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/updatenotifications.sh...

8.1CVSS8.3AI score0.01312EPSS
Exploits1References2
OSV
OSV
added 2024/01/11 3:15 a.m.3 views

CVE-2023-51073

An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/updatenotifications.sh...

8.1CVSS6.1AI score0.01312EPSS
Exploits1References2
Prion
Prion
added 2024/01/11 3:15 a.m.20 views

Design/Logic Flaw

An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/updatenotifications.sh...

5.1CVSS8.2AI score0.01312EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/11 12:0 a.m.3 views

CVE-2023-51073

An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/updatenotifications.sh...

8.3AI score0.01312EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/01/11 12:0 a.m.3 views

Buffalo LS210D Security Vulnerability

The Buffalo LS210D is a hard disk drive from Buffalo Japan. A security vulnerability exists in the Buffalo LS210D version v.1.78-0.03 that originates from a vulnerability that could allow a remote attacker to execute arbitrary code via the firmware update script in...

8.1CVSS7.7AI score0.01312EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/01/11 12:0 a.m.27 views

CVE-2023-51073

An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/updatenotifications.sh...

8.5AI score0.01312EPSS
Exploits1References2
CVE
CVE
added 2024/01/11 12:0 a.m.60 views

CVE-2023-51073

CVE-2023-51073 affects Buffalo LS210D, firmware version 1.78-0.03, enabling an unauthenticated remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifications.sh. The issue is noted across multiple sources (NVD, Red Hat advisories, JVN) with a CVSS v3....

8.1CVSS8.3AI score0.01312EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/11 12:0 a.m.4 views

PT-2024-14051 · Buffalo · Buffalo Ls210D

Name of the Vulnerable Software and Affected Versions: Buffalo LS210D version 1.78-0.03 Description: The issue allows a remote attacker to execute arbitrary code via the Firmware Update Script at "/etc/init.d/update notifications.sh". Recommendations: For Buffalo LS210D version 1.78-0.03, as a...

8.1CVSS8.3AI score0.01312EPSS
Exploits1References5
Rows per page
Query Builder