CVE-2014-9284: OS Command Injection
The Buffalo WHR-1166DHP 1.60 and earlier, WSR-600DHP 1.60 and earlier, WHR-600D 1.60 and earlier, WHR-300HP2 1.60 and earlier, WMR-300 1.60 and earlier, WEX-300 1.60 and earlier, and BHR-4GRV2 1.04 and earlier routers allow remote authenticated users to execute arbitrary OS commands via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9284?
CVE-2014-9284 has a critical severity level due to the potential for remote code execution.
How do I fix CVE-2014-9284?
To address CVE-2014-9284, update the affected Buffalo router firmware to the latest version beyond 1.60 for the specified models.
Which devices are affected by CVE-2014-9284?
CVE-2014-9284 affects several Buffalo router models including WHR-1166DHP, WSR-600DHP, WHR-600D, WHR-300HP2, WMR-300, WEX-300, and BHR-4GRV2 with specific firmware versions.
Can CVE-2014-9284 be exploited remotely?
Yes, CVE-2014-9284 can be exploited by remote authenticated users, making it a critical vulnerability.
What type of vulnerability is CVE-2014-9284?
CVE-2014-9284 is classified as an OS command injection vulnerability.