CVE-2023-46681 (published 2023-12-26T07:29:17.894Z)
Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware Ver. 2.37 and earlier allows an authenticated attacker who can access to the product's command line interface to execute an arbitrary command.
Affected products: Vendor: BUFFALO INC.
Product: VR-S1000
Versions: firmware Ver. 2.37 and earlier