Buffalo Vr-s1000 Firmware vulnerabilities

4 CVEs affecting Buffalo Vr-s1000 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-51363, published 2023-12-26.

More from Buffalo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-45741, published 2023-12-26. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web management page to execute arbitrary OS commands.
• CVE-2023-51363, published 2023-12-26. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. VR-S1000 firmware Ver. 2.37 and earlier allows a network-adjacent unauthenticated attacker who can access the product's web management page to obtain sensitive information.
• CVE-2023-46681, published 2023-12-26. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware Ver. 2.37 and earlier allows an authenticated attacker who can access to the…
• CVE-2023-46711, published 2023-12-26. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an attacker to analyze the password of a specific product user.