Input Validation Flaw in Buffalo Broadband Routers
CVE-2017-10897

4.5MEDIUM

Key Information:

Vendor

Buffalo Inc.

Status
Bbr-4hg
Bbr-4mg
Vendor
CVE Published:
8 December 2017

What is CVE-2017-10897?

An input validation issue has been identified in Buffalo BBR-4HG and BBR-4MG broadband routers running specific firmware versions. This flaw allows a remote attacker to exploit the vulnerability, potentially causing the device to become unresponsive. Users are advised to review their firmware version and apply necessary updates to mitigate against this vulnerability.

Affected Version(s)

BBR-4HG firmware 1.00 to 1.48

BBR-4HG firmware 2.00 to 2.07

BBR-4MG firmware 1.00 to 1.48

References

https://jvn.jp/en/jp/JVN65994435/index.html
third-party-advisoryx_refsource_JVN
http://buffalo.jp/support_s/s20171201.html
x_refsource_CONFIRM

CVSS V3.1

Score:
4.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.