NetSight
high7.2

CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root.

Impact

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root.

Affected products

VendorProductAffected versions
BuffaloLs210d Firmware
Version 1.78-0.03

Weakness classification

References