CVE-2023-45741: Command Injection
Published Dec 26, 2023
·Updated
VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web management page to execute arbitrary OS commands.
Affected Software
2 affected components
All of the following
Buffalo Vr-s1000 Firmware<=2.37
Buffalo Vr-s1000
Remediation
Patch Available
Event History
Dec 26, 2023
CVE Published
07:28 AM
Data Sourced
07:28 AM
DescriptionWeakness
Data Sourced
via NVD·08:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-45741?
CVE-2023-45741 is considered a critical vulnerability due to the potential for arbitrary OS command execution.
2
How do I fix CVE-2023-45741?
To mitigate CVE-2023-45741, users should upgrade the firmware of the VR-S1000 device to a version later than 2.37.
3
What systems are affected by CVE-2023-45741?
CVE-2023-45741 affects VR-S1000 firmware versions 2.37 and earlier.
4
Can CVE-2023-45741 be exploited remotely?
CVE-2023-45741 requires an attacker to have access to the product's web management page for exploitation.
5
What is the impact of CVE-2023-45741?
The impact of CVE-2023-45741 is the ability for an attacker to execute arbitrary commands on the affected device.