CVE-2017-10896

Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

Score

CVSS 3.0 6.1 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2017-12-08

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Bbr-4hg Firmware (Buffalo)
• Bbr-4mg Firmware (Buffalo)
• Bbr-4hg (Buffalo Inc.)
• Bbr-4mg (Buffalo Inc.)

References

• http://buffalo.jp/support_s/s20171201.html
• https://jvn.jp/en/jp/JVN65994435/index.html