CVE-2014-9284 is a critical vulnerability affecting several Buffalo router models, including the WHR-1166DHP, WSR-600DHP, and others running specific firmware versions. This flaw allows remote authenticated attackers to execute arbitrary operating system commands, indicating a severe compromise potential. With a CVSS score of 7.7, it presents a high impact due to its network-adjacent attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While no public exploits or active exploitation have been identified, and community discussion is minimal, the potential for significant damage necessitates awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.60CPE matchmatch criteria | cpe:2.3:h:buffalotech:wsr-600dhp_firmware:*:*:*:*:*:*:*:* | ||
<= 1.60CPE matchmatch criteria | cpe:2.3:h:buffalotech:whr-300hp2_firmware:*:*:*:*:*:*:*:* | ||
<= 1.60CPE matchmatch criteria | cpe:2.3:h:buffalotech:whr-1166dhp_firmware:*:*:*:*:*:*:*:* | ||
<= 1.04CPE matchmatch criteria | cpe:2.3:h:buffalotech:bhr-4grv2_firmware:*:*:*:*:*:*:*:* | ||
<= 1.60CPE matchmatch criteria | cpe:2.3:h:buffalotech:wmr-300_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:A/AC:L/Au:S/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.3 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.