CVE-2017-2274

Description

Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• BUFFALO INC. / WMR-433firmware Ver.1.02 and earlier – firmware Ver.1.02 and earlier
• BUFFALO INC. / WMR-433Wfirmware Ver.1.40 and earlier – firmware Ver.1.40 and earlier

References

• MISChttp://buffalo.jp/support_s/s20170606.html
• MISChttps://jvn.jp/en/jp/JVN48413726/index.html