CVE-2017-2273

HIGH

BUFFALO WMR-433 and WMR-433W - Cross-Site Request Forgery

Title source: llm

Description

Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

http://buffalo.jp/support_s/s20170606.html

Third Party Advisory, VDB Entry third-party-advisory x_refsource_jvn

https://jvn.jp/en/jp/JVN48413726/index.html

Scores

CVSS v3 8.8

EPSS 0.0077

EPSS Percentile 51.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-352

Status published

Products (4)

buffalo/wmr-433_firmware < 1.02

buffalo/wmr-433w_firmware < 1.40

BUFFALO INC./WMR-433 firmware Ver.1.02 and earlier

BUFFALO INC./WMR-433W firmware Ver.1.40 and earlier

Published Jul 22, 2017

Tracked Since Feb 18, 2026