Buffalo TS5600D1206 Firmware 3.61-0.10
Approved changes feed: RSS · Atom
cpe:2.3:o:buffalo:ts5600d1206_firmware:3.61-0.10:*:*:*:*:*:*:*
part: o version: 3.61-0.10 update: *
| Vendor | Buffalo (ae033968-4286-5bf6-8bbd-eb847d0b0a12) |
|---|---|
| Product | Ts5600D1206 Firmware (386c8874-2c08-508d-adef-5982adccd701) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-13324 |
vulnerable | 2026-06-08 05:10:51.151578 |
Details available
Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified HTTP Host header.
Published: 2018-11-26T22:00:00.000Z
Updated: 2024-08-05T09:00:34.977Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13323 |
vulnerable | 2026-06-08 05:10:51.151184 |
Details available
Cross-site scripting in detail.html in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute JavaScript via the "username" cookie.
Published: 2018-11-26T22:00:00.000Z
Updated: 2024-08-05T09:00:34.895Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13322 |
vulnerable | 2026-06-08 05:10:51.150577 |
Details available
Directory traversal in list_folders method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to list directory contents via the "path" parameter.
Published: 2018-11-26T22:00:00.000Z
Updated: 2024-08-05T09:00:35.109Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13321 |
vulnerable | 2026-06-08 05:10:51.150276 |
Details available
Incorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to call dangerous internal functions via the "method" parameter.
Published: 2018-11-26T22:00:00.000Z
Updated: 2024-08-05T09:00:34.495Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13320 |
vulnerable | 2026-06-08 05:10:51.149951 |
Details available
System Command Injection in network.set_auth_settings in Buffalo TS5600D1206 version 3.70-0.10 allows attackers to execute system commands via the adminUsername and adminPassword parameters.
Published: 2018-11-26T22:00:00.000Z
Updated: 2024-08-05T09:00:34.330Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13319 |
vulnerable | 2026-06-08 05:10:51.149526 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13318 |
vulnerable | 2026-06-08 05:10:51.148390 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.