Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2020-09-18	CVE-2020-5606	Cross-site Scripting vulnerability in Buffalo Airstation Whr-G54S Firmware Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary script via a specially crafted page. network buffalo CWE-79	4.3
2020-09-18	CVE-2020-5605	Path Traversal vulnerability in Buffalo Airstation Whr-G54S Firmware Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive information such as setting values via unspecified vectors. network low complexity buffalo CWE-22	4.0