CVE-2017-2274

MEDIUM

WMR-433 <1.02 & WMR-433W <1.40 - XSS

Title source: llm

Description

Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (2)

Scores

CVSS v3 6.1
EPSS 0.0023
EPSS Percentile 45.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (4)
buffalo/wmr-433_firmware < 1.02
buffalo/wmr-433w_firmware < 1.40
BUFFALO INC./WMR-433 < firmware Ver.1.02 and earlier
BUFFALO INC./WMR-433W < firmware Ver.1.40 and earlier
Published Jul 22, 2017
Tracked Since Feb 18, 2026