Skip to content
OpenAdvisories
Unscored CVE-2017-2273 EUVD-2017-11456GHSA-v7r2-h7f6-6cvv

Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows rem…

Published Jul 22, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: BUFFALO Product: WMR-433 Product: WMR-433W

Description

Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

VendorProductAffectedFixed
BUFFALO WMR-433 firmware Ver.1.02 and earlier —
BUFFALO WMR-433W firmware Ver.1.40 and earlier —

References