PT-2018-11745 · Buffalo · Buffalo Ts5600D1206

Published 2018-11-26 · Updated 2019-10-03 · CVE-2018-13321

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Buffalo TS5600D1206 version 3.61-0.10

Description The issue is related to incorrect access controls in the nasapi, allowing attackers to call internal functions. This can be achieved by manipulating the method parameter.

Recommendations For Buffalo TS5600D1206 version 3.61-0.10, consider restricting access to the nasapi to minimize the risk of exploitation. Avoid using the method parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2018-13321

Affected Products

Buffalo Ts5600D1206

References · 3

• 🔥 https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-13321 · Security Note
• https://osv.dev/vulnerability/CVE-2018-13321 · Vendor Advisory