Skip to content
OpenAdvisories
Unscored CVE-2017-2274 EUVD-2017-11457GHSA-x85m-gcmc-jcj8

Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers…

Published Jul 22, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: BUFFALO Product: WMR-433 Product: WMR-433W

Description

Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

VendorProductAffectedFixed
BUFFALO WMR-433 firmware Ver.1.02 and earlier —
BUFFALO WMR-433W firmware Ver.1.40 and earlier —

References