deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-25042
Published: 2021-04-27
Description: Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://lists.debian.org/debian-lts-announce/2021/05/msg00007.html; https://ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-20714
Published: 2021-04-27
Description: Directory traversal vulnerability in WP Fastest Cache versions prior to 0.9.1.7 allows a remote attacker with administrator privileges to delete arbitrary files on the server via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://jvn.jp/en/jp/JVN35240327/index.html; https://wordpress.org/plugins/wp-fastest-cache/; https://www.wpfastestcache.com/
CVE: CVE-2021-20715
Published: 2021-04-27
Description: Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://jvn.jp/en/jp/JVN97434260/index.html; https://jvn.jp/en/jp/JVN97434260/index.html
CVE: CVE-2020-17517
Published: 2021-04-27
Description: The S3 buckets and keys in a secure Apache Ozone Cluster must be inaccessible to anonymous access by default. The current security vulnerability allows access to keys and buckets through a curl command or an unauthenticated HTTP request. This enables unauthorized access to buckets and keys thereby exposing data to anonymous clients or users. This affected Apache Ozone prior to the 1.1.0 release.
CVSS Score: 7.5 (HIGH)
CWE: CWE-285, CWE-306
References: https://lists.apache.org/thread.html/rdd59a176b32c63f7fc0865428bf9bbc69297fa17f6130c80c25869aa%40%3Cdev.ozone.apache.org%3E; https://lists.apache.org/thread.html/rdd59a176b32c63f7fc0865428bf9bbc69297fa17f6130c80c25869aa%40%3Cdev.ozone.apache.org%3E
CVE: CVE-2021-28125
Published: 2021-04-27
Description: Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: http://www.openwall.com/lists/oss-security/2021/04/27/2; https://lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b[PII_REDACTED]1368434%40%3Cdev.superset.apache.org%3E; https://lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b[PII_REDACTED]1368434%40%3Cdev.superset.apache.org%3E
CVE: CVE-2020-35542
Published: 2021-04-27
Description: Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attack.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=61; https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=61
CVE: CVE-2021-27480
Published: 2021-04-27
Description: Delta Industrial Automation COMMGR Versions 1.12 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute remote code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-110-03; https://us-cert.cisa.gov/ics/advisories/icsa-21-110-03
CVE: CVE-2021-22660
Published: 2021-04-27
Description: CNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-110-05; https://www.zerodayinitiative.com/advisories/ZDI-21-445/; https://www.zerodayinitiative.com/advisories/ZDI-21-446/
CVE: CVE-2021-22664
Published: 2021-04-27
Description: CNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-110-05; https://www.zerodayinitiative.com/advisories/ZDI-21-444/; https://us-cert.cisa.gov/ics/advisories/icsa-21-110-05
CVE: CVE-2021-28271
Published: 2021-04-27
Description: Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag (Full) for 'Everyone'and 'Authenticated Users' group.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://www.exploit-db.com/exploits/49678; https://www.zeroscience.mk/en/vulnerabilities; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5633.php
CVE: CVE-2021-28269
Published: 2021-04-27
Description: Soyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with Authenticated Users group with Full permissions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://www.exploit-db.com/exploits/49679; https://www.zeroscience.mk/en/vulnerabilities; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5634.php
CVE: CVE-2021-30642
Published: 2021-04-27
Description: An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a remote, unauthenticated attacker to execute arbitrary OS commands on the target with elevated privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://support.broadcom.com/security-advisory/content/security-advisories/0/SYMSA17969; https://support.broadcom.com/security-advisory/content/security-advisories/0/SYMSA17969
CVE: CVE-2021-3451
Published: 2021-04-27
Description: A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow configuration files to be written to non-standard locations.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://iknow.lenovo.com.cn/detail/dc_196156.html; https://iknow.lenovo.com.cn/detail/dc_196156.html
CVE: CVE-2021-3464
Published: 2021-04-27
Description: A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://iknow.lenovo.com.cn/detail/dc_196156.html; https://iknow.lenovo.com.cn/detail/dc_196156.html
CVE: CVE-2020-4981
Published: 2021-04-27
Description: IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation. IBM X-Force ID: 192541.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/192541; https://www.ibm.com/support/pages/node/6447077; https://exchange.xforce.ibmcloud.com/vulnerabilities/192541
CVE: CVE-2021-20448
Published: 2021-04-27
Description: IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196624.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196624; https://www.ibm.com/support/pages/node/6447139; https://exchange.xforce.ibmcloud.com/vulnerabilities/196624
CVE: CVE-2021-20549
Published: 2021-04-27
Description: IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199167.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199167; https://www.ibm.com/support/pages/node/6447143; https://exchange.xforce.ibmcloud.com/vulnerabilities/199167
CVE: CVE-2021-20550
Published: 2021-04-27
Description: IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199168.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199168; https://www.ibm.com/support/pages/node/6447143; https://exchange.xforce.ibmcloud.com/vulnerabilities/199168
CVE: CVE-2021-29666
Published: 2021-04-27
Description: IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199400.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199400; https://www.ibm.com/support/pages/node/6447107; https://exchange.xforce.ibmcloud.com/vulnerabilities/199400
CVE: CVE-2021-29667
Published: 2021-04-27
Description: IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 199403.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1236
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199403; https://www.ibm.com/support/pages/node/6447107; https://exchange.xforce.ibmcloud.com/vulnerabilities/199403
CVE: CVE-2020-21987
Published: 2021-04-27
Description: HomeAutomation 3.3.2 is affected by persistent Cross Site Scripting (XSS). XSS vulnerabilities occur when input passed via several parameters to several scripts is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/47806; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5556.php; https://www.exploit-db.com/exploits/47806
CVE: CVE-2020-21989
Published: 2021-04-27
Description: HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF). The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.exploit-db.com/exploits/47808; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5558.php; https://www.exploit-db.com/exploits/47808
CVE: CVE-2020-21998
Published: 2021-04-27
Description: In HomeAutomation 3.3.2 input passed via the 'redirect' GET parameter in 'api.php' script is not properly verified before being used to redirect users. This can be exploited to redirect a user to an arbitrary website e.g. when a user clicks a specially crafted link to the affected script hosted on a trusted domain.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5559.php; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2020-22000
Published: 2021-04-27
Description: HomeAutomation 3.3.2 suffers from an authenticated OS command execution vulnerability using custom command v0.1 plugin. This can be exploited with a CSRF vulnerability to execute arbitrary shell commands as the web user via the 'set_command_on' and 'set_command_off' POST parameters in '/system/systemplugins/customcommand/customcommand.plugin.php' by using an unsanitized PHP exec() function.
CVSS Score: 8.0 (HIGH)
CWE: CWE-78, CWE-352
References: https://www.exploit-db.com/exploits/47809; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5560.php; https://www.exploit-db.com/exploits/47809
CVE: CVE-2020-22001
Published: 2021-04-27
Description: HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local (loopback) IP address value allowing remote control of the smart home solution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-290
References: https://cwe.mitre.org/data/definitions/290.html; https://www.exploit-db.com/exploits/47807; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5557.php
CVE: CVE-2021-30638
Published: 2021-04-27
Description: Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files inside WEB-INF if using a specially-constructed URL. This was caused by an incomplete fix for CVE-2020-13953. This issue affects Apache Tapestry Apache Tapestry 5.4.0 version to Apache Tapestry 5.6.3; Apache Tapestry 5.7.0 version and Apache Tapestry 5.7.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-863
References: http://www.openwall.com/lists/oss-security/2021/04/27/3; https://lists.apache.org/thread.html/r37dab61fc7f7088d4311e7f995ef4117d58d86a675f0256caa6991eb%40%3Cusers.tapestry.apache.org%3E; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-21365
Published: 2021-04-27
Description: Bootstrap Package is a theme for TYPO3. It has been discovered that rendering content in the website frontend is vulnerable to cross-site scripting. A valid backend user account is needed to exploit this vulnerability. Users of the extension, who have overwritten the affected templates with custom code must manually apply the security fix. Update to version 7.1.2, 8.0.8, 9.1.4, 10.0.10 or 11.0.3 of the Bootstrap Package that fix the problem described. Updated version are available from the TYPO3 extension manager, Packagist and at https://extensions.typo3.org/extension/download/bootstrap_package/.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/benjaminkott/bootstrap_package/commit/de3a568fc311d6712d9339643e51e8627c80530b; https://github.com/benjaminkott/bootstrap_package/security/advisories/GHSA-p48w-vf3c-rqjx; https://typo3.org/security/advisory/typo3-ext-sa-2021-007
CVE: CVE-2021-21429
Published: 2021-04-27
Description: OpenAPI Generator allows generation of API client libraries, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using `File.createTempFile` in JDK will result in creating and using insecure temporary files that can leave application and system data vulnerable to attacks. OpenAPI Generator maven plug-in creates insecure temporary files during the process. The issue has been patched with `Files.createTempFile` and released in the v5.1.0 stable version.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-552
References: https://github.com/OpenAPITools/openapi-generator/pull/8795; https://github.com/OpenAPITools/openapi-generator/security/advisories/GHSA-867q-77cc-98mv; https://github.com/OpenAPITools/openapi-generator/pull/8795
CVE: CVE-2021-29200
Published: 2021-04-27
Description: Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.openwall.com/lists/oss-security/2021/04/27/4; https://lists.apache.org/thread.html/r108a964764b8bd21ebd32ccd4f51c183ee80a251c105b849154a8e9d%40%3Ccommits.ofbiz.apache.org%3E; https://lists.apache.org/thread.html/r708351f1a8af7adb887cc3d8a92bed8fcbff4a9e495e69a9ee546fda%40%3Cnotifications.ofbiz.apache.org%3E
CVE: CVE-2021-29460
Published: 2021-04-27
Description: Kirby is an open source CMS. An editor with write access to the Kirby Panel can upload an SVG file that contains harmful content like `<script>` tags. The direct link to that file can be sent to other users or visitors of the site. If the victim opens that link in a browser where they are logged in to Kirby, the script will run and can for example trigger requests to Kirby's API with the permissions of the victim. This vulnerability is critical if you might have potential attackers in your group of authenticated Panel users, as they can escalate their privileges if they get access to the Panel session of an admin user. Depending on your site, other JavaScript-powered attacks are possible. Visitors without Panel access can only use this attack vector if your site allows SVG file uploads in frontend forms and you don't already sanitize uploaded SVG files. The problem has been patched in Kirby 3.5.4. Please update to this or a later version to fix the vulnerability. Frontend upload forms need to be patched separately depending on how they store the uploaded file(s). If you use `File::create()`, you are protected by updating to 3.5.4+. As a work around you can disable the upload of SVG files in your file blueprints.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: http://packetstormsecurity.com/files/162359/Kirby-CMS-3.5.3.1-Cross-Site-Scripting.html; https://github.com/getkirby/kirby/releases/tag/3.5.4; https://github.com/getkirby/kirby/security/advisories/GHSA-qgp4-5qx6-548g
CVE: CVE-2021-30128
Published: 2021-04-27
Description: Apache OFBiz has unsafe deserialization prior to 17.12.07 version
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.openwall.com/lists/oss-security/2021/04/27/5; https://lists.apache.org/thread.html/r078351a876ed284ba667b33aba29428d7308a5bd4df78f14a3df6661%40%3Cnotifications.ofbiz.apache.org%3E; https://lists.apache.org/thread.html/r108a964764b8bd21ebd32ccd4f51c183ee80a251c105b849154a8e9d%40%3Ccommits.ofbiz.apache.org%3E
CVE: CVE-2021-29441
Published: 2021-04-27
Description: Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, when configured to use authentication (-Dnacos.core.auth.enabled=true) Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor that enables Nacos servers to bypass this filter and therefore skip authentication checks. This mechanism relies on the user-agent HTTP header so it can be easily spoofed. This issue may allow any user to carry out any administrative tasks on the Nacos server.
CVSS Score: 8.6 (HIGH)
CWE: CWE-290, CWE-290
References: https://github.com/advisories/GHSA-36hp-jr8h-556f; https://github.com/alibaba/nacos/issues/4701; https://github.com/alibaba/nacos/pull/4703
CVE: CVE-2021-29442
Published: 2021-04-27
Description: Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint is not protected and can be openly accessed by unauthenticated users. These endpoints are only valid when using embedded storage (derby DB) so this issue should not affect those installations using external storage (e.g. mysql)
CVSS Score: 8.6 (HIGH)
CWE: CWE-306
References: https://github.com/advisories/GHSA-36hp-jr8h-556f; https://github.com/alibaba/nacos/issues/4463; https://github.com/alibaba/nacos/pull/4517
CVE: CVE-2021-29472
Published: 2021-04-27
Description: Composer is a dependency manager for PHP. URLs for Mercurial repositories in the root composer.json and package source download URLs are not sanitized correctly. Specifically crafted URL values allow code to be executed in the HgDriver if hg/Mercurial is installed on the system. The impact to Composer users directly is limited as the composer.json file is typically under their own control and source download URLs can only be supplied by third party Composer repositories they explicitly trust to download and execute source code from, e.g. Composer plugins. The main impact is to services passing user input to Composer, including Packagist.org and Private Packagist. This allowed users to trigger remote code execution. The vulnerability has been patched on Packagist.org and Private Packagist within 12h of receiving the initial vulnerability report and based on a review of logs, to the best of our knowledge, was not abused by anyone. Other services/tools using VcsRepository/VcsDriver or derivatives may also be vulnerable and should upgrade their composer/composer dependency immediately. Versions 1.10.22 and 2.0.13 include patches for this issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-88, CWE-94
References: https://blog.sonarsource.com/php-supply-chain-attack-on-composer/; https://getcomposer.org/; https://github.com/composer/composer/security/advisories/GHSA-h5h8-pc6h-jvvx
CVE: CVE-2021-29476
Published: 2021-04-27
Description: Requests is a HTTP library written in PHP. Requests mishandles deserialization in FilteredIterator. The issue has been patched and users of `Requests` 1.6.0, 1.6.1 and 1.7.0 should update to version 1.8.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/WordPress/Requests/security/advisories/GHSA-52qp-jpq7-6c54; https://github.com/rmccue/Requests/pull/421; https://github.com/WordPress/Requests/security/advisories/GHSA-52qp-jpq7-6c54
CVE: CVE-2021-20716
Published: 2021-04-28
Description: Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54 firmware Ver.2.32 and prior, WBR2-G54-KD firmware Ver.2.32 and prior, WBR-B11 firmware Ver.2.23 and prior, WBR-G54 firmware Ver.2.23 and prior, WBR-G54L firmware Ver.2.20 and prior, WHR2-A54G54 firmware Ver.2.25 and prior, WHR2-G54 firmware Ver.2.23 and prior, WHR2-G54V firmware Ver.2.55 and prior, WHR3-AG54 firmware Ver.2.23 and prior, WHR-G54 firmware Ver.2.16 and prior, WHR-G54-NF firmware Ver.2.10 and prior, WLA2-G54 firmware Ver.2.24 and prior, WLA2-G54C firmware Ver.2.24 and prior, WLA-B11 firmware Ver.2.20 and prior, WLA-G54 firmware Ver.2.20 and prior, WLA-G54C firmware Ver.2.20 and prior, WLAH-A54G54 firmware Ver.2.54 and prior, WLAH-AM54G54 firmware Ver.2.54 and prior, WLAH-G54 firmware Ver.2.54 and prior, WLI2-TX1-AG54 firmware Ver.2.53 and prior, WLI2-TX1-AMG54 firmware Ver.2.53 and prior, WLI2-TX1-G54 firmware Ver.2.20 and prior, WLI3-TX1-AMG54 firmware Ver.2.53 and prior, WLI3-TX1-G54 firmware Ver.2.53 and prior, WLI-T1-B11 firmware Ver.2.20 and prior, WLI-TX1-G54 firmware Ver.2.20 and prior, WVR-G54-NF firmware Ver.2.02 and prior, WZR-G108 firmware Ver.2.41 and prior, WZR-G54 firmware Ver.2.41 and prior, WZR-HP-G54 firmware Ver.2.41 and prior, WZR-RS-G54 firmware Ver.2.55 and prior, and WZR-RS-G54HP firmware Ver.2.55 and prior) allows a remote attacker to enable the debug option and to execute arbitrary code or OS commands, change the configuration, and cause a denial of service (DoS) condition.
CVSS Score: 9.8 (CRITICAL)
References: https://jvn.jp/en/vu/JVNVU90274525/index.html; https://www.buffalo.jp/news/detail/20210427-02.html; https://jvn.jp/en/vu/JVNVU90274525/index.html