CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0CVE-2017-10897
https://notcve.org/view.php?id=CVE-2017-10897
Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors. Un problema de validación de entradas en los routers de banda ancha Buffalo BBR-4HG y BBR-4MG con firmware 1.00 a 1.48 y 2.00 a 2.07 permite que un atacante provoque que el dispositivo no responda utilizando vectores no especificados. • http://buffalo.jp/support_s/s20171201.html https://jvn.jp/en/jp/JVN65994435/index.html • CWE-20: Improper Input Validation •
CVSS: 6.1EPSS: 0%CPEs: 6EXPL: 0CVE-2017-10896
https://notcve.org/view.php?id=CVE-2017-10896
Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en los routers de banda ancha Buffalo BBR-4HG y BBR-4MG con firmware 1.00 a 1.48 y 2.00 a 2.07 permite que un atacante inyecte scripts web o HTML arbitrarios utilizando vectores no especificados. • http://buffalo.jp/support_s/s20171201.html https://jvn.jp/en/jp/JVN65994435/index.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •