Arbitrary OS Command Execution in Buffalo WZR-1750DHP2
CVE-2018-0556

8.8HIGH

Key Information:

Vendor

Buffalo Inc.

Status
Wzr-1750dHP2
Vendor
CVE Published:
9 April 2018

What is CVE-2018-0556?

The Buffalo WZR-1750DHP2, specifically versions up to 2.30, is susceptible to a vulnerability that enables an attacker to execute arbitrary OS commands through unspecified vectors. This flaw could potentially allow unauthorized access and control over the device, undermining its security and integrity.

Affected Version(s)

WZR-1750DHP2 Ver.2.30 and earlier

References

http://jvn.jp/en/jp/JVN93397125/index.html
third-party-advisoryx_refsource_JVN
http://buffalo.jp/support_s/s20180328.html
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.