Buffalo LS210D Firmware vulnerabilities

2 CVEs affecting Buffalo LS210D Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-49038, published 2024-01-29.

More from Buffalo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-49038, published 2024-01-29. High severity, CVSS 7.2. EPSS: 1.8% chance of exploitation in the next 30 days. Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root.
• CVE-2023-51073, published 2024-01-11. High severity, CVSS 8.1. EPSS: 1.3% chance of exploitation in the next 30 days. An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifications.sh.