CVSS 3.1 Score 7.2 of 10 (high)


Published Jan 29, 2024
Updated: Feb 6, 2024


CVE-2023-49038 is a primary cyber vulnerability categorized as CWE-78: Improper Neutralization of Special Elements used in an OS Command (OS Command Injection). It affects Buffalo LS210D 1.78-0.03 and allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root. The vulnerability has a base severity rating of HIGH, with a base score of 7.2 according to NIST's National Vulnerability Database (NVD). The attack vector is through the network, and it requires high privileges but no user interaction. The potential danger includes high impact on integrity and confidentiality, with an availability impact also rated as HIGH. The exploitability score is 1.2, indicating that it is relatively easy to exploit this vulnerability. Remediation measures have not been specified, and no analysis description is available for this particular CVE at this time.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-49038 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options