CVE-2021-20731

WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges via unspecified vectors.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:buffalo:wsr-1166dhp4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:buffalo:wsr-1166dhp4:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:buffalo:wsr-1166dhp3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:buffalo:wsr-1166dhp3:-:*:*:*:*:*:*:*

Information

Published : 2021-06-08 19:15

Updated : 2021-06-16 09:30


NVD link : CVE-2021-20731

Mitre link : CVE-2021-20731


JSON object : View

CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Advertisement

dedicated server usa

Products Affected

buffalo

  • wsr-1166dhp3
  • wsr-1166dhp4_firmware
  • wsr-1166dhp4
  • wsr-1166dhp3_firmware