Veeti Punnonen

**Name of the Vulnerable Software and Affected Versions** BUFFALO Wi-Fi products (affected versions not specified) **Description** BUFFALO Wi-Fi products improperly handle input from web forms when assembling internal command line strings. This allows an administrative user to execute arbitrary operating system commands by sending a specially crafted HTTP request. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** BUFFALO Wi-Fi products (affected versions not specified) **Description** A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. In this case, a non-authenticated attacker can send a specially crafted HTTP request to trigger this condition, leading to a denial-of-service (DoS) state where the device becomes unavailable. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.