CVE-2023-49038: Buffalo LS210D Firmware

High severity, CVSS 7.2. EPSS: 1.8% chance of exploitation in the next 30 days.

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root.

Affected products

• Buffalo LS210D Firmware: version 1.78-0.03 only

Published 2024-01-29. Last modified 2026-06-17.