CVE-2014-9284

The Buffalo WHR-1166DHP 1.60 and earlier, WSR-600DHP 1.60 and earlier, WHR-600D 1.60 and earlier, WHR-300HP2 1.60 and earlier, WMR-300 1.60 and earlier, WEX-300 1.60 and earlier, and BHR-4GRV2 1.04 and earlier routers allow remote authenticated users to execute arbitrary OS commands via unspecified vectors.

Score

CVSS 2.0 7.7 High

Status

Modified - vultures@jpcert.or.jp

Published

2015-06-09

Last modified

2024-08-06

Weaknesses

CWE-78

Affected products

• Bhr-4grv2 Firmware (Buffalotech)
• Wex-300 Firmware (Buffalotech)
• Whr-1166dhp Firmware (Buffalotech)
• Whr-300hp2 Firmware (Buffalotech)
• Whr-600d Firmware (Buffalotech)
• Wmr-300 Firmware (Buffalotech)
• Wsr-600dhp Firmware (Buffalotech)

References

• http://jvn.jp/en/jp/JVN50447904/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000085