Vulnerabilities > Buffalo > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-12-08 CVE-2017-10897 Improper Input Validation vulnerability in Buffalo Bbr-4Hg Firmware and Bbr-4Mg Firmware
Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors.
low complexity
buffalo CWE-20
5.5
2017-12-08 CVE-2017-10896 Cross-site Scripting vulnerability in Buffalo Bbr-4Hg Firmware and Bbr-4Mg Firmware
Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
network
buffalo CWE-79
4.3
2017-07-22 CVE-2017-2274 Cross-site Scripting vulnerability in Buffalo Wmr-433 Firmware and Wmr-433W Firmware
Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
buffalo CWE-79
4.3
2017-07-22 CVE-2017-2273 Cross-Site Request Forgery (CSRF) vulnerability in Buffalo Wmr-433 Firmware and Wmr-433W Firmware
Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
network
buffalo CWE-352
6.8
2016-06-19 CVE-2016-4816 Information Exposure vulnerability in Buffalo products
BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive information via unspecified vectors.
network
buffalo CWE-200
4.3
2016-06-19 CVE-2016-4815 Path Traversal vulnerability in Buffalo products
Directory traversal vulnerability on BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices with firmware 2.16 and earlier allows remote attackers to read arbitrary files via unspecified vectors.
network
low complexity
buffalo CWE-22
5.0