Buffalo WXR9300BE6P Series Path Traversal Vulnerability Allowing Arbitrary File Modification and OS Command Execution

A path traversal vulnerability has been identified in the Buffalo WXR9300BE6P series Wi-Fi router, specifically in firmware versions prior to 1.10. This vulnerability allows an administrative user to alter arbitrary files on the device. Additionally, certain file modifications could be exploited to execute arbitrary operating system commands.

Impact

Exploitation of this vulnerability could lead to unauthorized file modifications and the execution of arbitrary OS commands on the affected router.

Remediation

Users are advised to update the router's firmware to version 1.10 or later. The latest firmware versions can be downloaded from the Buffalo support website.