PT-2023-19681 · Buffalo · Bs-Gs2008P +5

Name of the Vulnerable Software and Affected Versions: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier BS-GSL2016P firmware Ver. 1.10-0.03 and earlier BS-GSL2016 firmware Ver. 1.10-0.03 and earlier BS-GS2008 firmware Ver. 1.0.10.01 and earlier BS-GS2016 firmware Ver. 1.0.10.01 and earlier BS-GS202...

From Ransomware to Cyber Espionage: 55 Zero-Day Vulnerabilities Weaponized in 2022

As many as 55 zero-day vulnerabilities were exploited in the wild in 2022, with most of the flaws discovered in software from Microsoft, Google, and Apple. While this figure represents a decrease from the year before, when a staggering 81 zero-days were weaponized, it still represents a significa...

Buffalo network devices 安全漏洞

Buffalo network devices are a family of network devices from Buffalo, Japan. A security vulnerability exists in Buffalo network devices that stems from the use of hard-coded credentials, which could be exploited by an attacker to gain access to the debugging capabilities of the product...

Buffalo network devices 跨站脚本漏洞

Buffalo network devices are a family of network devices from Buffalo, Japan. A security vulnerability exists in Buffalo network devices that originates from a stored cross-site scripting vulnerability...

Buffalo network devices 安全漏洞

Buffalo network devices are a family of network devices from Buffalo, Japan. A security vulnerability exists in Buffalo network devices, which was discovered to contain an improper access control vulnerability...

K16844: Multicast DNS vulnerability VU#550620

Security Advisory Description Multicast DNS implementations may respond to unicast queries that originate from sources outside of the local link network. Such responses may disclose information about network devices or be used in denial-of-service DoS amplification attacks. VU550620 Impact None. ...

PT-2022-28121 · NetGear · Netgear R6400V2 +8

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX40 versions prior to 1.0.2.60 NETGEAR RAX35 versions prior to 1.0.2.60 NETGEAR R6400v2 versions prior to 1.0.4.122 NETGEAR R6700v3 versions prior to 1.0.4.122 NETGEAR R6900P versions prior to 1.3.3.152 NETGEAR R7000P versions prior...

CVE-2022-43443

OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page...

CVE-2022-43466

OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command if a specially crafted request is sent to a specific CGI program...

CVE-2022-43486

Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected devices...

Denial of service

Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug functionalities and execute an arbitrary command on the affected devices...

Command injection

OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page...

Command injection

OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command if a specially crafted request is sent to a specific CGI program...

CVE-2022-43466

Summary: CVE-2022-43466 is a OS command injection on Buffalo network devices. The vulnerability allows a network-adjacent attacker with administrative privileges to execute arbitrary OS commands by sending a specially crafted request to a specific CGI program on the device’s management interface....

CVE-2022-43443

CVE-2022-43443 is an OS command injection vulnerability in Buffalo network devices that allows a network-adjacent attacker to execute arbitrary OS commands by sending a specially crafted request to the device management page. The vulnerability affects Buffalo network devices (family of devices re...

PT-2022-26938 · Buffalo · Buffalo Network Devices

Name of the Vulnerable Software and Affected Versions: Buffalo network devices affected versions not specified Description: A hidden functionality issue in Buffalo network devices allows an attacker with administrative privileges to enable debug functionalities and execute arbitrary commands on t...

CVE-2022-43486

Buffalo network devices are affected by CVE-2022-43486, a hidden functionality vulnerability that lets a network-adjacent attacker with administrative privileges enable debug features and execute arbitrary commands on the device. The issue applies to Buffalo network devices; the exact affected mo...

CVE-2022-43443

OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page...

The vulnerability of the Common Gateway Interface (CGI) interface of microprogramming software for network devices such as ZyXEL USG, ZyWALL, USG FLEX, ATP, and VPN allows attackers to execute cross-site scripting attacks.

The vulnerability of the Common Gateway Interface CGI interface of microprogrammed network devices such as ZyXEL USG, ZyWALL, USG FLEX, ATP, and VPN is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-sit...

Buffalo network devices 安全漏洞

Buffalo network devices are a family of network devices from Buffalo, Japan. A security vulnerability exists in Buffalo network devices that could allow an authenticated attacker to execute arbitrary system commands...