Vulnerabilities > Buffalo > Ls210D Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2024-01-29 CVE-2023-49038 OS Command Injection vulnerability in Buffalo Ls210D Firmware 1.780.03
Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root.
network
low complexity
buffalo CWE-78
7.2
2024-01-11 CVE-2023-51073 Unspecified vulnerability in Buffalo Ls210D Firmware 1.780.03
An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifications.sh.
network
high complexity
buffalo
8.1