important · Wi-Fi
Unauthenticated requests can crash management services on Buffalo WSR-300HP and WEX-G300 devices.
Affects
Buffalo WSR-300HP Wi-Fi routers and WEX-G300 Wi-Fi range extenders running embedded firmware.
Crafted input reaches a stack-based overflow without authentication and puts the management service into a denial-of-service state.
Detail and 1 source
The management interface must be reachable, and internet exposure requires optional remote access.
Buffalo has published fixed versions.