« Volver al listado

CVE-2017-10897

Estado: ModificadaMedia (4.5)—

Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Buffalo — Bbr-4hg FirmwareBuffalo — Bbr-4mg Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-10897",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.5,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:L/Au:S/C:N/I:N/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 5.1,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 4.5,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 0.9
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "BUFFALO INC.",
          "product": "BBR-4HG",
          "versions": [
            {
              "status": "affected",
              "version": "firmware 1.00 to 1.48"
            },
            {
              "status": "affected",
              "version": "firmware 2.00 to 2.07"
            }
          ]
        },
        {
          "vendor": "BUFFALO INC.",
          "product": "BBR-4MG",
          "versions": [
            {
              "status": "affected",
              "version": "firmware 1.00 to 1.48"
            },
            {
              "status": "affected",
              "version": "firmware 2.00 to 2.07"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-12-08T15:29:00.230",
  "references": [
    {
      "url": "http://buffalo.jp/support_s/s20171201.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://jvn.jp/en/jp/JVN65994435/index.html",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://buffalo.jp/support_s/s20171201.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://jvn.jp/en/jp/JVN65994435/index.html",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Un problema de validación de entradas en los routers de banda ancha Buffalo BBR-4HG y BBR-4MG con firmware 1.00 a 1.48 y 2.00 a 2.07 permite que un atacante provoque que el dispositivo no responda utilizando vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T01:00:52.923",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:buffalo:bbr-4mg_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "30C41CE6-534D-405E-8BFE-F255095BF176",
              "versionEndIncluding": "1.48",
              "versionStartIncluding": "1.00"
            },
            {
              "criteria": "cpe:2.3:o:buffalo:bbr-4mg_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1F13A88E-6955-4D65-B637-40A6FDFDDC58",
              "versionEndIncluding": "2.07",
              "versionStartIncluding": "2.00"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:buffalo:bbr-4mg:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "76EA9B7A-13F2-42F3-8707-3AEC4854DD18"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:buffalo:bbr-4hg_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "86BF1D9A-2BD0-45CA-BF09-4B823367FD79",
              "versionEndIncluding": "1.48",
              "versionStartIncluding": "1.00"
            },
            {
              "criteria": "cpe:2.3:o:buffalo:bbr-4hg_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D4B17ED-6B51-4247-B475-A5DF328821F2",
              "versionEndIncluding": "2.07",
              "versionStartIncluding": "2.00"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:buffalo:bbr-4hg:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E38DF446-A597-4D5F-AAC8-B6B96793C446"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp"
}