CVE-2017-2274

CVE-2017-2274: vulnerability in BUFFALO INC. WMR-433

Published · Updated

Follow this CVE+ Monitor WMR-433+ Monitor WMR-433W

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
BUFFALO INC. · WMR-433BUFFALO INC. · WMR-433W
Related CVEs — BUFFALO INC. WMR-433

In the same product, most dangerous first.

CVE-2017-2273—CVE-2017-2273EPSS 0.8%