CVE-2023-51073

An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifications.sh.
References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:buffalo:ls210d_firmware:1.78-0.03:*:*:*:*:*:*:*
cpe:2.3:h:buffalo:ls210d:-:*:*:*:*:*:*:*

History

21 Nov 2024, 08:37

Type Values Removed Values Added
References () https://github.com/christopher-pace/CVE-2023-51073/ - Exploit, Third Party Advisory () https://github.com/christopher-pace/CVE-2023-51073/ - Exploit, Third Party Advisory
References () https://www.buffalotech.com - Product () https://www.buffalotech.com - Product

18 Jan 2024, 15:05

Type Values Removed Values Added
CPE cpe:2.3:o:buffalo:ls210d_firmware:1.78-0.03:*:*:*:*:*:*:*
cpe:2.3:h:buffalo:ls210d:-:*:*:*:*:*:*:*
First Time Buffalo ls210d Firmware
Buffalo
Buffalo ls210d
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.1
CWE NVD-CWE-noinfo
References () https://www.buffalotech.com - () https://www.buffalotech.com - Product
References () https://github.com/christopher-pace/CVE-2023-51073/ - () https://github.com/christopher-pace/CVE-2023-51073/ - Exploit, Third Party Advisory

11 Jan 2024, 03:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-11 03:15

Updated : 2024-11-21 08:37


NVD link : CVE-2023-51073

Mitre link : CVE-2023-51073

CVE.ORG link : CVE-2023-51073


JSON object : View

Products Affected

buffalo

  • ls210d
  • ls210d_firmware