important · Wi-Fi
Buffalo's authenticated web command injection also reaches the WEX-G300 extender.
Affects
Buffalo WEX-G300, a consumer Wi-Fi range extender running embedded firmware.
An attacker with administrator credentials and configuration-interface access can escape a web-form field into an operating-system command.
Detail and 1 source
Buffalo has released fixed firmware.