CVE-2023-46681

Improper neutralization of argument delimiters in a command 'Argument Injection' vulnerability in VR-S1000 firmware Ver. 2.37 and earlier allows an authenticated attacker who can access to the product's command line interface to execute an arbitrary command...

CVE-2023-46681

Improper neutralization of argument delimiters in a command 'Argument Injection' vulnerability in VR-S1000 firmware Ver. 2.37 and earlier allows an authenticated attacker who can access to the product's command line interface to execute an arbitrary command...

CVE-2023-46711

VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an attacker to analyze the password of a specific product user...

CVE-2023-45741

VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web management page to execute arbitrary OS commands...

Design/Logic Flaw

VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web management page to execute arbitrary OS commands...

Design/Logic Flaw

Improper neutralization of argument delimiters in a command 'Argument Injection' vulnerability in VR-S1000 firmware Ver. 2.37 and earlier allows an authenticated attacker who can access to the product's command line interface to execute an arbitrary command...

Information disclosure

VR-S1000 firmware Ver. 2.37 and earlier allows a network-adjacent unauthenticated attacker who can access the product's web management page to obtain sensitive information...

CVE-2023-51363

CVE-2023-51363 affects BUFFALO VR-S1000 firmware versions 2.37 and earlier. A network-adjacent, unauthenticated attacker who can reach the product’s web management page can obtain sensitive information (information disclosure). The issue is documented across multiple sources (NVD/Red Hat/CVE list...

CVE-2023-46711

Buffalo VR-S1000 firmware v2.37 and earlier contains a hard-coded cryptographic key, which may allow an attacker to analyze the passwords of a specific product user. Impact can include disclosure of user credentials; remediation is to update the firmware to a version that does not use a hard-code...

CVE-2023-46681

Improper neutralization of argument delimiters in a command 'Argument Injection' vulnerability in VR-S1000 firmware Ver. 2.37 and earlier allows an authenticated attacker who can access to the product's command line interface to execute an arbitrary command...

CVE-2023-46681

Buffalo VR-S1000 devices (firmware 2.37 and earlier) are affected by an Argument Injection vulnerability caused by improper neutralization of argument delimiters in the command interface. An authenticated attacker with access to the device’s command line interface can potentially execute arbitrar...

CVE-2023-45741

Summary: CVE-2023-45741 affects Buffalo VR-S1000 firmware prior to 2.42 (specifically 2.37 and earlier) and allows an attacker with access to the device’s web management page to execute arbitrary OS commands. The Red Hat/NVD/JVN entries corroborate that the vulnerability enables network-adjacent ...

CVE-2023-45741

VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web management page to execute arbitrary OS commands...

Multiple vulnerabilities in BUFFALO VR-S1000

Overview VR-S1000 provided by BUFFALO INC. contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2023-45741 Argument injection CWE-88 - CVE-2023-46681 Use of hard-coded cryptographic key CWE-321 - CVE-2023-46711 Information disclosure CWE-200 - CVE-2023-51363...

Buffalo VR-S1000 Security Vulnerability

The Buffalo VR-S1000 is a VPN router from Buffalo Japan. A security vulnerability exists in the Buffalo VR-S1000 version 2.37 and earlier, which stems from the use of hard-coded cryptographic keys, which allows an attacker to analyze the passwords of users of a specific product...

JVN#23771490: Multiple vulnerabilities in BUFFALO VR-S1000

VR-S1000 provided by BUFFALO INC. contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2023-45741 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H| Base Score: 6.8 CVSS v2| AV:A/AC:L/Au:S/C:P/I:P/A:P| Base Score: 5.2 Argument...

Buffalo VR-S1000 Security Vulnerability

The Buffalo VR-S1000 is a VPN router from Buffalo, Japan. A security vulnerability exists in the Buffalo VR-S1000 version 2.37 and earlier versions that could allow an attacker to access the product's web management page to execute arbitrary operating system commands...

Buffalo VR-S1000 Security Vulnerability

The Buffalo VR-S1000 is a VPN router from Buffalo, Japan. A security vulnerability exists in the Buffalo VR-S1000 version 2.37 and prior versions that could allow an unauthenticated attacker to gain access to the product's web management page to obtain sensitive information...

PT-2023-8310 · Buffalo · Buffalo Vr-S1000

Name of the Vulnerable Software and Affected Versions: BUFFALO VR-S1000 versions 2.37 and earlier Description: The issue is related to the use of a hard-coded cryptographic key in the firmware, which may allow an attacker to analyze the password of a specific product user. This could potentially...

PT-2023-8530 · Buffalo · Buffalo Vr-S1000

Name of the Vulnerable Software and Affected Versions: BUFFALO VR-S1000 versions 2.37 and earlier Description: The issue is related to the improper neutralization of argument delimiters in a command, also known as an 'Argument Injection' vulnerability. This allows an authenticated attacker who ca...