description: VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web management page to execute arbitrary OS commands.
problem types: OS command injection
affected:
{
vendor: BUFFALO INC.
product: VR-S1000
versions:
version: firmware Ver. 2.37 and earlier, status: affected
}