8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD
Description
The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user input. An authenticated remote attacker could leverage this vulnerability to alter device configuration, potentially gaining remote code execution.
Affected (2)
Products: Buffalo: Wsr 2533dhpl2 Bk Firmware, Wsr 2533dhp3 Bk Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.02 |
| Running on/with | Platform Versions |
|---|---|
Buffalo Wsr 2533dhpl2 Bk | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.24 |
| Running on/with | Platform Versions |
|---|---|
Buffalo Wsr 2533dhp3 Bk | All versions |
References (2)
Source: vulnreport@tenable.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Timeline
No history available yet.