GCVE - cpe:2.3:h:buffalo:ts5600d1206:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:buffalo:ts5600d1206:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Buffalo (`ae033968-4286-5bf6-8bbd-eb847d0b0a12`)
Product	Ts5600D1206 (`deb99b06-5cdb-5e2f-87fc-3333fd15c687`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-13324`	not_vulnerable	2026-06-08 05:10:51.151600	Details available Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified HTTP Host header. Published: 2018-11-26T22:00:00.000Z Updated: 2024-08-05T09:00:34.977Z Open on db.gcve.eu Reference links https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-13323`	not_vulnerable	2026-06-08 05:10:51.151208	Details available Cross-site scripting in detail.html in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute JavaScript via the "username" cookie. Published: 2018-11-26T22:00:00.000Z Updated: 2024-08-05T09:00:34.895Z Open on db.gcve.eu Reference links https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-13322`	not_vulnerable	2026-06-08 05:10:51.150702	Details available Directory traversal in list_folders method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to list directory contents via the "path" parameter. Published: 2018-11-26T22:00:00.000Z Updated: 2024-08-05T09:00:35.109Z Open on db.gcve.eu Reference links https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-13321`	not_vulnerable	2026-06-08 05:10:51.150298	Details available Incorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to call dangerous internal functions via the "method" parameter. Published: 2018-11-26T22:00:00.000Z Updated: 2024-08-05T09:00:34.495Z Open on db.gcve.eu Reference links https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-13320`	not_vulnerable	2026-06-08 05:10:51.149975	Details available System Command Injection in network.set_auth_settings in Buffalo TS5600D1206 version 3.70-0.10 allows attackers to execute system commands via the adminUsername and adminPassword parameters. Published: 2018-11-26T22:00:00.000Z Updated: 2024-08-05T09:00:34.330Z Open on db.gcve.eu Reference links https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-13319`	not_vulnerable	2026-06-08 05:10:51.149553	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-13318`	not_vulnerable	2026-06-08 05:10:51.148985	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.