CVE-2017-2274

Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Date published : 2017-07-21

http://buffalo.jp/support_s/s20170606.html

https://jvn.jp/en/jp/JVN48413726/index.html