Wex G300
Monthly
Unauthenticated stack-based buffer overflow in Buffalo WSR-300HP routers and WEX-G300 Wi-Fi extenders allows network-adjacent attackers to crash devices via crafted HTTP requests, causing denial-of-service. Exploitation requires network access to the HTTP management interface, typically only reachable from the local network unless remote administration is exposed to the WAN. No public exploit code or confirmed active exploitation (CISA KEV) has been identified, and the issue is assessed as genuine but low-priority due to reachability constraints.
Authenticated command injection in BUFFALO WSR-300HP wireless routers and WEX-G300 range extenders lets a user who already holds administrative access to the device's web management interface execute arbitrary operating system commands by submitting a crafted HTTP request to a web form field. Successful exploitation yields full compromise of the device (confidentiality, integrity and availability all rated High), but the attack is gated behind valid admin credentials or an active admin session, which is the dominant risk-limiting factor, and the affected models are primarily Japanese consumer/SOHO devices. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV; the vendor CVSS 4.0 score of 8.6 reflects impact severity once the prerequisite administrative access is met.
Unauthenticated stack-based buffer overflow in Buffalo WSR-300HP routers and WEX-G300 Wi-Fi extenders allows network-adjacent attackers to crash devices via crafted HTTP requests, causing denial-of-service. Exploitation requires network access to the HTTP management interface, typically only reachable from the local network unless remote administration is exposed to the WAN. No public exploit code or confirmed active exploitation (CISA KEV) has been identified, and the issue is assessed as genuine but low-priority due to reachability constraints.
Authenticated command injection in BUFFALO WSR-300HP wireless routers and WEX-G300 range extenders lets a user who already holds administrative access to the device's web management interface execute arbitrary operating system commands by submitting a crafted HTTP request to a web form field. Successful exploitation yields full compromise of the device (confidentiality, integrity and availability all rated High), but the attack is gated behind valid admin credentials or an active admin session, which is the dominant risk-limiting factor, and the affected models are primarily Japanese consumer/SOHO devices. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV; the vendor CVSS 4.0 score of 8.6 reflects impact severity once the prerequisite administrative access is met.