Skip to content
OpenAdvisories
Unscored CVE-2017-10896 EUVD-2017-2536GHSA-hc6x-qrj5-34w2

Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows …

Published Dec 8, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: BUFFALO Product: BBR-4HG Product: BBR-4MG

Description

Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

Affected products

VendorProductAffectedFixed
BUFFALO BBR-4HG firmware 1.00 to 1.48, firmware 2.00 to 2.07 —
BUFFALO BBR-4MG firmware 1.00 to 1.48, firmware 2.00 to 2.07 —

References