CVEvulnerability

CVE-2014-9284

7.7 HIGH Published 2015-06-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-06-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.7 HIGH — AV:A/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-78

Description

The Buffalo WHR-1166DHP 1.60 and earlier, WSR-600DHP 1.60 and earlier, WHR-600D 1.60 and earlier, WHR-300HP2 1.60 and earlier, WMR-300 1.60 and earlier, WEX-300 1.60 and earlier, and BHR-4GRV2 1.04 and earlier routers allow remote authenticated users to execute arbitrary OS commands via unspecified vectors.

Affected configurations

• buffalotech wsr-600dhp firmware (<= 1.60) • buffalotech whr-300hp2 firmware (<= 1.60) • buffalotech whr-1166dhp firmware (<= 1.60) • buffalotech bhr-4grv2 firmware (<= 1.04) • buffalotech wmr-300 firmware (<= 1.60) • buffalotech wex-300 firmware (<= 1.60) • buffalotech whr-600d firmware (<= 1.60)

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References