CVE-2023-49038

Summary

CVE-2023-49038 is a command injection vulnerability affecting the ping utility on Buffalo LS210D NAS devices running version 1.78-0.03. An authenticated attacker can exploit this weakness to inject arbitrary commands with root privileges, posing a significant security risk. Once executed, these commands could lead to unauthorized system access, data theft, or other malicious activities. It is highly recommended that affected users update their systems to the latest patch to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.